PolicyBazaar interview question

Describe about authorization use in web api?