This read-create value sets whether a given ACL rule permits or denies matching traffic, defaulting to deny. An admin sets it to define the filtering outcome for packets matching that rule's other classification criteria. For example, setting this to permit(1) on a rule matching a specific management subnet allows that traffic through while the ACL's implicit or explicit deny blocks everything else.