Authorization — Authorization determines which actions an authenticated identity or other requester receives permission to perform. Systems evaluate roles, policies, and contextual requirements before granting access. An identity might authenticate successfully while lacking authorization to view a particular record or change a setting. – Access and Identity Management

Added October 7, 2026

Authorization — Authorization determines which resources or actions a user, device, or process is permitted to access. It applies permissions based on factors such as assigned roles, responsibilities, and security policies. This differs from authentication, which verifies identity rather than deciding what that identity may do.

Added November 6, 2026