An operation specified in a policy or policy set that should be performed by the PEP in conjunction with the enforcement of an authorization decision.
Source(s):
NIST SP 800-95
from
OASIS XACML 2.0 Specification