Authorization allows administrators to control what tasks or privileges a user may perform or use. Personnel can only perform the tasks and use the privileges that have been assigned to them. Authorization places restrictions on personnel who work with hardware or software.
Allow personnel to work only with hardware and software that they are trained and qualified to use.
Set up a system of Read/Write/Execute permissions to control user access to commands, disk space, devices, and applications.