# Authorization Policy

> The declared set of rules determining which principals may perform which actions on which resources.

Record: `lex:authorization-policy`
Kind: constraint
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lex-authorization-policy

## category

- [Security Privacy Compliance](https://banes-lab.com/records/lex-category/security-privacy-compliance.md)

## referenced-by

- [Access Control](https://banes-lab.com/records/arch/access-control.md)