Authorization

Authorization decides what an authenticated user is allowed to access or do. For example, an admin may access settings, while a normal user may only view their account.