Technical definition
Authorisation
The process of checking what an identified user is allowed to do.
What It Means
Authorisation determines whether an identified user may view or change a particular resource. A product can authenticate users successfully while still applying broken permissions.
A Useful Analogy
Authorisation is the access list after identity has been checked.