The Access Control interface provides a way to create and manage authentication and authorization services to protect and regulate realm-based resources. When an enterprise user requests information, OpenSSO verifies the user's identity and authorizes the user to access the specific resource that the user has requested. Through the OpenSSO console, you can create and manage the following: