The process of determining whether a given identity is allowed to access a given resource or function.