Authorization

Authorization determines what resources a user or entity is allowed to access and what actions they can perform. After a user is authenticated, it is authorized to only interact with data and features explicitly granted rights. This restricts sensitive information to only individuals the system knows and maintains the integrity of systems.

Authorization conforms to the principle of least privilege (PoLP), known as the principle of minimal privilege (PoMP) or the principle of least authority (PoLA). PoLP states that a user, entity, or system should have only the essential permissions to operate its functions. This minimizes risks and limits potential damage from accidents or malicious actions that we might not have anticipated or known.

In addition, knowingly granting permissions for specific resources and actions improves accountability and compliance with security policies. Staying with the knowns promotes a safer sense of security.

As we have briefly mentioned...