Be careful not to confuse authentication with authorization.
Authentication is the process of verifying the identity of the sender and/or
receiver of information. Authorization establishes what the user is allowed
to do once the user has been identified and authenticated by the system.
Another “A” term sometimes misinterpreted is accountability, which is the
ability to track actions to users.