The AA layer governs access from the communication layer to the lower layers. Applications and users need to be authenticated and authorized for such access to be granted.