What is Authorisation?

Authorisation

Authorisation is the process that determines what resources an authenticated user is allowed to access and what actions they are permitted to perform.

While authentication confirms who a user is, authorisation controls what they can do within a system. It often involves assigning permissions and roles based on the principle of least privilege, ensuring that users have only the access they need to perform their tasks and nothing more.

Authorisation is crucial for protecting sensitive data and maintaining operational security.