Biometrics are BEST used for:

Authorization determines 'what you can do' after identity has been verified; biometrics do not define access rights.

Biometrics, such as fingerprints or facial recognition, verify a user's identity by comparing a unique physical or behavioral trait against a stored template. This process directly confirms 'who you are,' which is the core function of authentication in the AAA (Authentication, Authorization, Accounting) model.

Auditing involves reviewing logs and activities, which occurs *after* authentication and authorization, not as a primary function of biometrics itself.

Accounting tracks user activity and resource consumption, which is a post-authentication function, separate from the initial identity verification.