Authentication vs Authorization vs Accounting (AAA)
Venn Diagrams · made in Skemio

What it shows
- Authentication verifies identity via credentials, tokens, or biometrics.
- Authorization evaluates permissions and policies to grant resource access.
- Accounting logs user actions for audit compliance and anomaly detection.
The takeaway
Secure systems require all three: AuthN verifies identity, AuthZ restricts rights, Accounting tracks impact.
- #CyberSecurity
- #AppSec
- #ZeroTrust
- #IAM
- #InfoSec





