Authorization
The process of deciding whether an authenticated identity may perform an action or access a resource.
Plain English
Check what this person or system is allowed to do.
In context
Authorization evaluates policies roles attributes ownership and context and should be enforced at every relevant trust boundary.
Example
“The API authorizes account deletion only for administrators in that workspace.”
When you'll hear this
- API design
- permission reviews
- security testing
Common misunderstanding
Authorization is distinct from authentication and a valid login does not grant every permission.
Also known as
authzpermission checkaccess authorization
Commonly used by
Related terms
Updated: 2026-08-27
