Authorization

Authorization is the process of granting or denying access to resources, functions, or data based on a user’s identity and permissions. It determines what an authenticated user can do within a system. Authorization is typically role-based or attribute-based, ensuring users only access what is necessary. In Keycloak, it is managed through resources, scopes, permissions, and policies, allowing fine-grained access control. Unlike authentication, which verifies identity, authorization defines access rights. Modern frameworks like User-Managed Access (UMA) enable users to manage resource sharing securely.