Authorization defines what an authenticated user is allowed to access.
Why it matters:
- Prevents users from seeing or changing information they shouldn’t.
- Enforces “least privilege” — giving people only the access they need.
Pro tip: Review permissions regularly. Employees often keep access to systems they no longer need, which increases risk.
« Back to Glossary Index