Cloud application authorization patterns

Let’s get started with cloud application authorization patterns!

Problem

How to manage access to different application functionality for users or services.

Context

Authorization determines what a user or a service is permitted or not permitted to do inside the application. Once a user or service identity is established, there is a need to establish which actions they can perform with the application.

Solution

Authorization is a method of allowing or denying access to a particular resource depending on an authenticated user’s or service’s entitlements. The authorization could work at two levels, as follows:

• Coarse-grained—High-level and overarching entitlements defined as create, read, update, delete (CRUD) sorts of permissions at the service or protected resource level
• Fine-grained—Detailed, explicit, and specific entitlements to protected resources based on additional factors...