Authorization services determine what resources a user, device, or application is allowed to access after they have been authenticated. It defines the permissions and access levels assigned to authenticated identities.
ــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــ

Key Concepts

Access Control Lists (ACLs)

Specify which users or system processes are granted access to objects and what operations are allowed on given objects.

Role-Based Access Control (RBAC)

Assigns permissions to users based on their roles within an organization. This simplifies management by grouping users with similar access needs.

Attribute-Based Access Control (ABAC)

Grants access based on attributes (e.g., user’s department, time of access) rather than roles alone. ABAC provides more fine-grained control.

Policy–Based Access Control

Uses high-level policies to manage and enforce access rights. Policies are typically based on business rules or regulatory requirements.

Examples

AWS Identity and Access Management (IAM), Microsoft Azure Role-Based Access Control (RBAC), and IBM Security Verify.