Authorization

Authorization enforces the security policy.

  • The authorization process determines which objects a user can access and which actions a user can take on those objects.
  • The authorization process grants appropriate access to the user.
Verify Identity Access handles authorization by using the following methods:
  • Verify Identity Access authorization service.
  • Access control lists (ACLs), protected object policies (POPs), and authorization rules for fine-grained access control.
  • Standards-based authorization API, which uses the aznAPI for C language applications, and the Java™ Authentication and Authorization Service (JAAS) for Java language applications.
  • External authorization service capability.