Access Control

While authorization is primarily concerned with establishing the policies and rules that dictate access (i.e. what a person or system is allowed to do), access control is the system or process that enforces those defined permissions.