What is the best description of authorisation?

A. deciding what an authenticated identity may access B. a finite sequence of steps for solving a problem C. a recoverable copy of data D. a weakness that can be exploited