The ACL is a list noting which users have access rights to network resources. Specific users, for instance, may have access to company payroll information while other users are restricted from accessing such information. Different users may have different rights to a specific resource. Some users, for instance, may only be able to read a file while other users may be able to read and write to a file.