Access control list. An access control list contains the list of permissions for an object, including users, system processes, or operations that are allowed access to that object. In a typical ACL, each entry includes a subject and any allowed operations. ACLs can also apply to network resources such as port numbers or IP addresses.