authorization framework
C11228
concept
An authorization framework is a structured system of rules, components, and processes that determines and enforces what actions users or services are permitted to perform on protected resources.