the ability to grant access to a system resource

Note 1 to entry:  Authorization of access to resources should be based on the need-to-know principle. It is important that access is restricted in a system.