User authorization is explicit permission for software to perform a particular task or action on someone’s behalf. It defines what an application or AI agent may do, and should be limited to the specific actions the user intended.
In cybersecurity, authorization helps prevent software from misusing a user’s account, session, or data. A browsing agent might be allowed to search for a product but still need the user’s confirmation before placing an order or changing account settings. Narrow permissions, activity logs, and confirmation for high-impact actions reduce the harm if an agent is misled by hostile web content or otherwise behaves unexpectedly.