Let me in: authentication and authorisation Access controls require confirmation of who you are, and verification that you are permitted to use the system or services.