The ability of an operating system process or thread to run temporarily in the security context of a specific caller and gain authorized access to resources using that identity.