Authorization is the process by which the server determines the user has the permission or access policies to access the resource. The process decides whether to grant the permission to access the resource based on predefined rights or not. The very important thing in authorization is to define the roles and assign these privileges to users.