The Access Control Servlet can allow or deny access to a page or group of pages based on criteria such as membership in a group or satisfaction of a targeting rule.
For more information, see the Commerce Service Center Installation and Programming Guide and the Commerce Reference Store IUA Overview for more information.