A device comprising: a power manager configured to control power provided to a plurality of power domains on the device, wherein each power domain has a respective client device, wherein each respective client device has a respective access control (AC) component that is configured to control which other components on the device can communicate with the respective client device; and a save-restore engine (SRE) configured to save, in an isolated local memory, configuration data for an AC component located in a power domain affected by the power manager initiating a power collapse operation, wherein saving the configuration data for the AC component in the isolated local memory comprises: receiving, by the SRE, a save request from the power manager and an identification of the AC component; determining, by the SRE, that the identification is defined in an access control table that defines the AC component; reading, by the SRE, the configuration data for the AC component from the AC component; writing, by the SRE, the configuration data for the AC component in the isolated local memory; and sending, by the SRE, a save completion response to the power manager, and wherein the SRE is configured to restore, from the isolated local memory, the configuration data of the AC component when the power manager restores the power to the power domain of the AC component. a power manager configured to control power provided to a plurality of power domains on the device, wherein each power domain has a respective client device, wherein each respective client device has a respective access control (AC) component that is configured to control which other components on the device can communicate with the respective client device; and a save-restore engine (SRE) configured to save, in an isolated local memory, configuration data for an AC component located in a power domain affected by the power manager initiating a power collapse operation, wherein saving the configuration data for the AC component in the isolated local memory comprises: receiving, by the SRE, a save request from the power manager and an identification of the AC component; determining, by the SRE, that the identification is defined in an access control table that defines the AC component; reading, by the SRE, the configuration data for the AC component from the AC component; writing, by the SRE, the configuration data for the AC component in the isolated local memory; and sending, by the SRE, a save completion response to the power manager, and receiving, by the SRE, a save request from the power manager and an identification of the AC component; determining, by the SRE, that the identification is defined in an access control table that defines the AC component; reading, by the SRE, the configuration data for the AC component from the AC component; writing, by the SRE, the configuration data for the AC component in the isolated local memory; and sending, by the SRE, a save completion response to the power manager, and wherein the SRE is configured to restore, from the isolated local memory, the configuration data of the AC component when the power manager restores the power to the power domain of the AC component. <EOS>