Authorization is the process of verifying a user's or system's rights to access certain resources or functions after their identity has been confirmed (authentication).

It determines what actions the authenticated subject is allowed to perform.
It is based on security policies and user roles.
Examples of authorization mechanisms include access control lists (ACLs) and role-based access control (RBAC).

Previous Next