mirror of
				https://github.com/datahub-project/datahub.git
				synced 2025-11-03 20:27:50 +00:00 
			
		
		
		
	
		
			
				
	
	
		
			19 lines
		
	
	
		
			1011 B
		
	
	
	
		
			Markdown
		
	
	
	
	
	
			
		
		
	
	
			19 lines
		
	
	
		
			1011 B
		
	
	
	
		
			Markdown
		
	
	
	
	
	
# Overview
 | 
						|
 | 
						|
Authorization specifies _what_ accesses an _authenticated_ user has within a system.
 | 
						|
This section is all about how DataHub authorizes a given user/service that wants to interact with the system.
 | 
						|
 | 
						|
:::note
 | 
						|
 | 
						|
Authorization only makes sense in the context of an **Authenticated** DataHub deployment. To use DataHub's authorization features
 | 
						|
please first make sure that the system has been configured from an authentication perspective as you intend.
 | 
						|
 | 
						|
:::
 | 
						|
 | 
						|
Once the identity of a user or service has been established, DataHub determines what accesses the authenticated request has.
 | 
						|
 | 
						|
This is done by checking what operation a given user/service wants to perform within DataHub & whether it is allowed to do so.
 | 
						|
The set of operations that are allowed in DataHub are what we call **Policies**.
 | 
						|
 | 
						|
Policies specify fine-grain access control for _who_ can do _what_ to _which_ resources, for more details on the set of Policies that DataHub provides please see the [Policies Guide](../authorization/policies.md).
 |