authorization granted to do something (to the ‘Core System’), permissions are granted to system service recipients and operators determining what actions they are allowed to take when interacting with the ‘Core System’