Once a user is identified, they must be authorized to specific functions and data within Oracle Utilities Application Framework, which uses an inbuilt security model for authorization. This model contains all the data necessary for the definition of authorizations to function and data.