Authorization is the process that is done after user authentication. Authorization is used to learn the permissions of the user accessing the resource. Even though the user is authenticated, it does not mean that all the protected or secured resources are accessible. This is where authorization comes into play and only allows the user to access resources that they are permitted to access.