Authorization
Authorization is the process of determining what an authenticated identity is allowed to do, typically enforced through roles, permissions, and group memberships.
Role-based access control assigns the minimum permissions a user needs to perform their job.