In the Authorization a check is made to determine which access level an authenticated person or service has. It is specified which data can be accessed and which actions can be carried out with it.