What is authorization?
Authorization is the process an identity management system uses to determine what a user is allowed to do.
Authorization is the second component of the AAA (Authentication, Authorization, and Accounting) model for access control.
Authorization must follow Authentication, because before the identity management system can determine what you are authorized to do, it must first determine who you are.
Authorization systems are becoming increasingly granular. Early authorization systems would allow or disallow users access to specific computing systems. Modern authorization systems are able to allow or disallow access to specific menu items or database cells.
Bookmark What is authorization?
