"Authentication and authorization are related but distinct processes in an organization’s identity and access management (IAM) system."
"Authentication verifies a user’s identity."
"Authorization gives the user the right level of access to system resources."
"The authentication process relies on credentials, such as passwords or fingerprint scans, that users present to prove they are who they claim to be."
"The authorization process relies on user permissions that outline what each user can do within a particular resource or network. For example, permissions in a file system might dictate whether a user can create, read, update or delete files."
"Authentication and authorization processes apply to both human and nonhuman users, such as devices, automated workloads and web apps."