Systems Analyst: What is the difference between authentication and authorization?

Authentication — who are you? Authorization — what can you do?

Authentication:

• Verifies identity.
• Username/password, biometrics.
• First step.
• Before authorization.

Authorization:

• Determines permissions.
• Roles, access control.
• After authentication.
• What you can access.

Key differences:

• Authentication — identity.
• Authorization — permissions.
• Authentication — first.
• Authorization — second.