Authorize a person to use the directory service:
If a person has a set of credentials then the person has 'User Principal Name' and 'password'.
If a person has the credentials then the person is considered to be authentic.
If a person is authenticated then the person is able to sign-on.
If a person is allowed to access a resource on a network
then the person is called an 'authorized user'.