In computer security, the process of ensuring that users can access only those resources of a computer system for which they are authorized.