Definition
Authorization is the process of determining which resources and actions an authenticated entity is permitted to access.
Human Explanation
After Identity is confirmed, the system decides what the user may view, change or perform.
Why it Matters
Appropriate Authorization prevents actions that exceed granted permissions.
Conceptual Boundary
Authorization follows Authentication. Confirmation of Identity does not automatically grant access to every resource.
Practical Perspective
Two correctly authenticated users may have completely different permissions in the same system.