The third step of I triple A. Granting specific permissions to an authenticated subject. Occurs after authentication.
Want to actually apply concepts like this instead of just reading definitions?