Authorization is the act of granting access to a specific resource. This can be an entire application, or a much smaller piece of functionality. Authorization is also referred to as access control.

The de facto standard for fine-grained authorization is eXtensible Access Control Markup Language (XACML). For coarse-grained authorization on Internet scale, OAuth is an important standard.