Once users are authenticated, they are then authorized to access various assets. These assets include databases, connection services, system functions, and user applications. Resources and roles are then assigned to assets and users for authorization.