Glossary: ASP.NET Core

Authorization

Deciding what an identified caller may do. A failure gives 403.