Authorization answers: "What can you do?" It comes after authentication.
RBAC
GitHub teams · CMS tools · Slack workspaces
ABAC
Example policy:
user.department == "HR"
&& time < 18:00
&& resource.confidentiality == "internal"Healthcare · Financial services · Government · AWS IAM policies
ACL
OAuth2 scopes
GitHub OAuth scopes:
scope: "read:repo" // read repos
scope: "write:repo" // push code
// NOT granted: delete:repo