Which term describes enforcing access rights after authentication?

Which term describes enforcing access rights after authentication?

• A. Authorization
• B. Authentication
• C. Access Control Lists
• D. Multi-factor authentication

Answer: (A)

Authorization is the process of granting or denying access based on permissions after identity has been established. Once someone proves who they are through authentication, the system checks what they’re allowed to do and which resources they can reach. This decision is guided by roles, attributes, or policies, and it determines whether actions like reading, writing, or deleting a resource are permitted for that user. For instance, after logging in successfully, a user might be allowed to view a report but not to modify it, or to access only certain folders based on their role. Authentication is about proving identity, and multi-factor authentication is a method used during that proof. Access Control Lists describe specific permissions, but the act of applying those permissions to allow or block access is what authorization does.

Authorization is the process of granting or denying access based on permissions after identity has been established. Once someone proves who they are through authentication, the system checks what they’re allowed to do and which resources they can reach. This decision is guided by roles, attributes, or policies, and it determines whether actions like reading, writing, or deleting a resource are permitted for that user. For instance, after logging in successfully, a user might be allowed to view a report but not to modify it, or to access only certain folders based on their role. Authentication is about proving identity, and multi-factor authentication is a method used during that proof. Access Control Lists describe specific permissions, but the act of applying those permissions to allow or block access is what authorization does.