When discussing access controls, which of the following terms describes the process of determining the activities or functions that an Individual is permitted to perform?

Authentication verifies the claimed identity of a user (proving who you are), not what actions that user is allowed to take.

Identification is the initial step of presenting a claimed identity (e.g., providing a username), before any verification or permission check occurs.

Authorization is the process of granting or denying specific permissions to an already-identified and authenticated user. It answers 'what are you allowed to do?' by evaluating the subject's rights against a policy, determining which activities or functions they may perform.

Validation is not a standard AAA (Authentication, Authorization, Accounting) term and does not specifically describe the permission-determination process.