Authorization

Authorization Management

Authorization Management is the IAM domain responsible for defining and enforcing what authenticated identities are allowed to do.

Definition

Authorization Management is the part of IAM that determines which actions, resources, data, or scopes an authenticated subject may access. It includes the modeling of permissions, access rules, policy enforcement, and consistency of authorization decisions across applications and services.

The Ariovis perspective

Ariovis separates governed entitlements, authentication and runtime authorization. When a decision depends on the user, resource, action and context, it should be made at the moment of use.

These concepts matter most inside a real project.

The first conversation helps establish your context, the systems involved and the next useful decision.