The subject is most often assumed to be a person. A non-person entity (NPE), such as an autonomous
service or application could also fill the role of the subject. In general, every operation performed by a
computer must be done on behalf of some person or organization (in the case of an NPE) with the authority
to perform the operation. The term subject is used to denote a human or NPE requesting access to a resource.