Question: what is the difference between authorization and access control?
Answer: Whereas authorization policies define what an individual identity or group may access, access controls – also called permissions or privileges – are the methods we use to enforce such policies.