Dictionary · Cybersecurity Fundamentals

The decision about what an identity is allowed to do after it has been accepted. Permissions, roles, and policies express that decision.

Once the system believes who you are, it still has to decide whether you may read a file, change a setting, or approve a payment.

Example: Two authenticated employees can both log in, but only the payroll role is authorized to open salary records.