What is authorization in GIS applications?

Authorization determines which rights and permissions an authenticated user has in a GIS environment: which layers are visible, which tools are usable, whether export and editing are allowed.

Rights are often assigned via roles and groups (for example viewer, editor, administrator). In multi-tenant platforms, authorization also separates data and projects per organization or department.

Authorization is not the same as authentication. Someone may be logged in correctly but lack access to a confidential map layer. Together they form access control.