Downstream resources generally include all the various systems, applications, and data that users required provisioned access to after their Active Directory (or other directory service) account has been created.