A computer checks the database of user names and passwords for a match before granting access. Authentication is the process of confirming an identity. Authorization means granting access to a restricted resource to an identity: access control mechanisms enforce these restrictions.