Access and Usage Management is the capability that enforces access and usage policies. Access policies define the conditions under which services and data can be accessed, while usage policies specify the rights and obligations governing how data may be used — including any future use of that data.