Attributes are fields that exist on an object that says something about it.

For example, you might have a group that has attributes like Owner, Description, and Sync status. It answers the question of who owns that group, what that group is about, and whether it’s synced or not. Using attributes and policies allows you to have a more scalable form of access.