It verifies the identity of a user before access is granted.

It assigns permissions to files and folders.

 It determines what a user is allowed to do after logging in.

It encrypts the data stored in a system.