approved authorization

A set of access rights or privileges — covering subjects such as users and processes, and objects such as files, systems, and data flows — that has been formally sanctioned through an organization's governance process (policy definition, role assignment, management decision, or regulatory requirement). The modifier "approved" distinguishes rights that have been deliberately granted and documented under an access control policy from rights that exist merely by default, misconfiguration, or implicit trust. In practice, standards such as NIST SP 800-53 (controls AC-3 and AC-4) and NIST SP 800-171 use the expression to describe what systems must actively enforce — whether for logical access to resources or for the flow of controlled information — rather than simply permit passively.

Advisory only. A term this product ships is defined by an authority document, not by a search result.