ConceptsAuthorization

Authorization

Authorization is the decision about what an authenticated user, service, or system is allowed to do.

Glossary definition

13 direct links3 lessons

Concept Neighborhood

Prerequisite · arrow shows the orderCurated pairingRelated · bigger circles cover more lessons

Start here

Attribute-Based Access Control

The foundation Authorization builds on, worth understanding first.

Open concept →

Prerequisitelearn this first

Attribute-Based Access ControlStart here

An access model that uses attributes such as role, location, device, or sensitivity to make decisions.

lesson

Curated pairinghand-picked as a natural companion

Authentication

Authentication is the process of proving that a user, device, service, or system is who it claims to be.

lessons

Least Privilege

The principle of giving users and systems only the access they need to do their job.

lesson

Relatedsorted by lesson coverage

Audit Trail

lessons

Identification

lessons

PBAC

lesson

Permissions

lesson

Policies

lesson

RBAC

lesson

Show 4 more connections

ReBAC

lesson

Scopes

lesson

Server-Side Authorization

lesson

Vertical Privilege Escalation

lesson

Related Lessons

3 lessons cover this concept

Security Purpose and Defensive Outcomes

General Beginner

Confidentiality, Integrity, and Availability

General Beginner

Authentication, Authorization, and Accountability

General Beginner