mirror of
				https://github.com/datahub-project/datahub.git
				synced 2025-10-31 18:59:23 +00:00 
			
		
		
		
	
		
			
				
	
	
		
			19 lines
		
	
	
		
			1011 B
		
	
	
	
		
			Markdown
		
	
	
	
	
	
			
		
		
	
	
			19 lines
		
	
	
		
			1011 B
		
	
	
	
		
			Markdown
		
	
	
	
	
	
| # Overview
 | |
| 
 | |
| Authorization specifies _what_ accesses an _authenticated_ user has within a system.
 | |
| This section is all about how DataHub authorizes a given user/service that wants to interact with the system.
 | |
| 
 | |
| :::note
 | |
| 
 | |
| Authorization only makes sense in the context of an **Authenticated** DataHub deployment. To use DataHub's authorization features
 | |
| please first make sure that the system has been configured from an authentication perspective as you intend.
 | |
| 
 | |
| :::
 | |
| 
 | |
| Once the identity of a user or service has been established, DataHub determines what accesses the authenticated request has.
 | |
| 
 | |
| This is done by checking what operation a given user/service wants to perform within DataHub & whether it is allowed to do so.
 | |
| The set of operations that are allowed in DataHub are what we call **Policies**.
 | |
| 
 | |
| Policies specify fine-grain access control for _who_ can do _what_ to _which_ resources, for more details on the set of Policies that DataHub provides please see the [Policies Guide](../authorization/policies.md).
 | 
