Which concept is the process of determining if a user has the right to access a service or perform an action?

Which concept is the process of determining if a user has the right to access a service or perform an action?

• A. Credential
• B. Directory Service
• C. Authorization
• D. Identity Provider (IdP)

Answer: (C)

Authorization is the process of determining whether a user has permission to access a service or perform an action. It uses policies and the user's attributes (such as roles, groups, or specific permissions) to decide what actions are allowed, typically after identity has been established. Common methods include access control lists, role-based access control, and attribute-based access control. For example, after you prove who you are, the system checks whether your role allows you to view a particular file; if not, access is denied even though you are authenticated. A credential is what you present to prove identity, a directory service stores identities and attributes, and an IdP handles authentication, not the authorization decision itself.

Authorization is the process of determining whether a user has permission to access a service or perform an action. It uses policies and the user's attributes (such as roles, groups, or specific permissions) to decide what actions are allowed, typically after identity has been established. Common methods include access control lists, role-based access control, and attribute-based access control. For example, after you prove who you are, the system checks whether your role allows you to view a particular file; if not, access is denied even though you are authenticated. A credential is what you present to prove identity, a directory service stores identities and attributes, and an IdP handles authentication, not the authorization decision itself.