Explain the differences between user authentication and granting access rights.

User identity verification (authentication) is the process of confirming that the user truly is who they claim to be. For example, entering a login and password, biometric data, or a token.

Access rights provision (authorization) is the process of determining what actions or resources are permitted for a given user after successful authentication.

Example:

• The user enters a login and password — the system verifies them (authentication).
• After successful login, the system checks whether this user can edit a document or view certain data (authorization).

Thus, authentication answers the question "Who are you?", and authorization — "What are you allowed to do?".