Authorization allows administrators to control what tasks or privileges a user may perform or use. Personnel can only perform the tasks and use the privileges that have been assigned to them. Authorization refers to restrictions placed on personnel to work with hardware or software.
Allow personnel to work only with hardware and software that they are trained and qualified to use.
Set up a system of Read/Write/Execute permissions to control user access to commands, disk space, devices, and applications.