Authorization

The KB uses authorization to control access to content and administrative functions based on a user's permissions and group memberships. Authentication verifies who a user is (such as logging in with a password or email), authorization decides what files, categories, or administrative settings they can access.

Authorization answers the question: "What are you allowed to do?"
Authentication answers the question: "Who are you?"