4d316111_ing_Kerberos__Support____Cisco_Table_1_Kerberos_Terminology_Definition
[Term] instance [Definition] 
An authorization level label for Kerberos principals. Most Kerberos principals are of the form user@REALM (for example, smith@EXAMPLE.COM). A Kerberos principal with a Kerberos instance has the form user/instance@REALM (for example, smith/admin@EXAMPLE.COM). The Kerberos instance can be used to specify the authorization level for the user if authentication is successful. It is up to the server of each network service to implement and enforce the authorization mappings of Kerberos instances. Note that the Kerberos realm name must be in uppercase characters.
User Security Configuration Guide, Cisco IOS XE Release 3S - Configuring Kerberos [Support] - Cisco