What is authorization?

Authorization is the process of verifying a user's or system's rights to access certain resources or functions after their identity has been confirmed (authentication).

• It determines what actions the authenticated subject is allowed to perform.
• It is based on security policies and user roles.
• Examples of authorization mechanisms include access control lists (ACLs) and role-based access control (RBAC).