← Back to glossary

Deciding what you’re allowed to do after you log in.

Definition

Authorization is about permissions: once the system knows who you are, it decides what you can access or change.

In plain English Deciding what you’re allowed to do after you log in.

Why this matters

Why it matters: Even if an account is compromised, tight permissions can limit what an attacker can reach.

Example

Example: A child account can view content but can’t change billing settings.