Gartner: Authorization

Authorization is a process that ensures only correctly authenticated users have access to specific information for which they have approval from the owner. It is a form of information security mechanism that protects system resources such as data, files, services, etc.