authorization
Checking what someone who has signed in is allowed to do.
Authorization decides whether an authenticated identity may perform an action, using roles, claims or policies (RequireAuthorization, [Authorize]).
Examples
A signed-in customer may view their own orders but gets 403 for someone else's.
See also