Process of determining what actions or resources an authenticated user is permitted to access.
Authorisation determines what authenticated users can do—which resources they can access and what actions they can perform. Authorisation follows authentication; you must verify identity before granting access. Authorisation models include role-based access control (RBAC), attribute-based access control (ABAC), and discretionary access control (DAC). Effective authorisation implements least privilege—granting only necessary access.
Why It Matters
The DSC Perspective:
Authorisation controls the blast radius when accounts are compromised. Excessive authorisation means compromised accounts can access more than necessary. Implement least privilege through appropriate authorisation.