Authentication, Authorization, and Accounting

Authentication is the system for logging a person into a resource, such as username/password

authorization is an abstraction to ensure that a particular user is given access to the right resources. For example, a given organization might have roles like _admin_, _moderator_, _guest_ etc which provide access to different sets of the internal data.

accounting is the system of logging and tracking who got access to what and when.