What is authorization?

Authorization determines what an authenticated user is permitted to do within an application — which data they can view, which actions they can take, and which features they can access. Distinct from authentication (who you are), authorization defines permissions. Role-based access control (RBAC) is a common authorization pattern.