Authorization is the act of evaluating whether a person, process or device is allowed to operate on or possess a specific resource.