The process of granting or denying access to a resource based on a user's level of permission or privilege.