Is a set of rights defined for a subject and an object. they are based on the subject's identity. authentication authorization credentials passwords

The answer is "authorization".

Authorization is the capacity of indicating access rights/benefits to assets concerning data security and PC security in general and to get to control in particular. All the more formally, "to approve/authorize" is to characterize an access strategy. For instance, HR staff is regularly approved to get to worker records and this approach is normally formalized as access control rules in a PC framework. During this task, the framework utilizes subject's identity for authorization.  

what organizations did you select

i truly dont know the answer wait i do its 1,3,4