Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

The concept being used is authorization. Authentication has already occurred when the user signed in and proved their identity. Authorization is the separate step that evaluates the user's roles, permissions, or access policies to determine what actions the signed-in identity is permitted to perform on specific resources. Federation describes trust relationships between identity systems, and conditional access is a policy-based control that can influence both authentication and authorization but is not itself the core decision-making concept for resource permissions.