The granting or withholding of a service or access to a resource to a requestor based on the identity of the principal for which the requestor is acting.

• 根据请求者在访问过程中的身份的认证，决定允许或是拒绝为其提供所请求的服务或资源访问请求。