An object authority that allows the user to add users to, remove users from, and change users' authorities on the authorization list.