A group of objects that have data-level access control. Users can access objects in an access collection if they have been given the necessary access which is based on role definitions that are stored in the Configuration Management database.