Authentication

The KB uses authentication to verify who a user is (such as logging in with a password or email), authorization decides what files, categories, or administrative settings they can access. Authorization is used to control access to content and administrative functions based on a user's permissions and group memberships.

Authentication answers the question: "Who are you?" 
Authorization answers the question: "What are you allowed to do?"