Granular authorization is access control that lets a system permit only specific actions on specific resources. Instead of giving a user broad access to a whole network, application, or server segment, the policy can allow one dataset, one API, or one workflow and deny everything else by default.
This matters in cyber security because it reduces the blast radius of a compromised account, device, or contractor credential. In a zero trust design, a successful login should not automatically unlock the internal network; the system should evaluate each request against identity, device posture, and resource-level rules. Defenders use granular authorization in IAM platforms, VPN replacements, cloud security policies, and privileged access tools. In real attacks, broad permissions let intruders move laterally and discover more systems. Tight authorization can stop that by forcing every access request to match a narrow policy, making unauthorized movement harder and easier to detect.