authorization
Deciding what an identified device is allowed to do, such as which topics it may publish to.
Authorization is the check, made after authentication, of whether an identified party may perform a given action on a given resource.
Examples
Once
gh-a1is logged in, the broker still checks every PUBLISH: writing togh1/gh-a1/telemetry/climateis allowed, but writing togh1/gh-b2/cmd/heateris refused.