Authorization is the process of granting access rights after authentication. It is used to enforce permissions by determining what actions an authenticated user is allowed to perform within a system.
Example:
A user can read but not edit a document in Google Drive.