What is Authorization?
Authorization is the process an identity management system uses to determine what a user is allowed to do.
Authorization is the second component of the AAA (Authentication, Authorization, and Accounting) model for access control.
Authorization must follow Authentication, because before the identity management system can determine what you are authorized to do, it must first determine who you are.
Authorization systems are becoming increasingly granular. Early authorization systems would allow or disallow users access to specific computing systems. Modern authorization systems are able to allow or disallow access to specific menu items or database cells.
|
|
|
Free White Papers on Networking
Vulnerability Management for Dummies
|
Our friends at Qualys are offering free copies of the electronic version of Vulnerability Management for Dummies to Tech-FAQ readers. Vulnerability Management for Dummies:
|
|
