Which RADIUS feature provides a mechanism to change the AAA attributes of a session after it is authenticated?

Authorization determines what a user is permitted to do at the time of initial access, not for changing attributes post-authentication.

Accounting tracks user session activity, duration, and data usage, but does not modify session attributes.

Authentication verifies a user's identity, which occurs before a session is established and its attributes are set.

Change of Authorization (CoA) is a RADIUS feature that enables dynamic modification of session authorization attributes or termination of a session after it has been authenticated and authorized. This is done via unsolicited CoA messages sent from the RADIUS server (e.g., Cisco ISE) to the network access device (e.g., switch).