Authorization Policy

Definitions

1. A defined rule set describing who may perform which actions on which resources under what conditions. Authorization policies can be static role rules or more dynamic expressions that combine claims, resource attributes, environment state, and business logic.

   In plain English: A formal set of rules that defines who can do what.

   Example: "The new authorization policy allowed finance leads to approve refunds only for their own region and only within configured monetary limits."

Related Terms

• Permission
• Role
• Allowlist
• Block Listing
• Deny by Default
• Permission Model
• Restriction
• Authorization Flow
• Authorization Handler