Entitlement
What an identity is allowed to do once authenticated — expressed as roles, permissions, scopes, or group membership depending on the system.
aka: permission, access right
Entitlements are evaluated on every action, not just at login, and the same underlying concept shows up under different names across platforms — a Linux file permission, an AWS IAM policy, an Active Directory group, an OAuth scope. Letting entitlements accumulate without ever retiring the old ones is how privilege creep happens.