Authorization and Access Control
Granting Appropriate Access
Authorization determines what an authenticated user is permitted to access. Organizations implement access control models to ensure users receive only the permissions required for their responsibilities.
Note
The Principle of Least Privilege requires users to receive only the minimum access necessary.
Summary
Authorization limits user activities according to business responsibilities and security requirements.