"host names or IP addresses that should be granted access to an object"?