How to distinguish between user identity verification process and determining their access permissions?

User identity verification (authentication) is the process of confirming that the user truly is who they claim to be. For example, entering a login and password, biometric data, or a token.

Permission determination (authorization) is the process of checking what actions or resources are accessible to this user after successful authentication. For example, access to certain pages, functions, or data.

Example: first, the user enters a login and password (authentication). If the data is correct, the system checks what rights this user has (authorization), and grants or denies access to the necessary resources.