What term refers to granting access to resources based on verified identity?

The concept that pertains to granting access to resources based on verified identity is known as authorization. This process occurs after a user's identity has been confirmed through authentication. It determines what an authenticated user is permitted to do, such as accessing certain resources, applications, or systems.

For example, once a user logs in and their identity is verified, authorization processes ensure that the individual receives appropriate permissions based on their role or account type. This might include permissions to view files, modify content, or access specific features.

In contrast, other terms are interconnected but distinct from authorization. Authentication refers to the initial step of verifying a user's identity, typically through passwords, biometrics, or other credentials. Access control refers to the broader policy framework that defines how resources are shared and who is allowed access, encompassing both authentication and authorization processes. Identification involves recognizing or stating who someone is but does not inherently include permissions or access rights. Hence, while all these concepts interplay in digital security, authorization specifically focuses on the permissions granted after a user's identity is affirmed.