Taken from Redwoodjs Role Based Access Control
Authentication is the act of validating that users are who they claim to be. Authorization is the process of giving the user permission to access a specific resource or function.
In even more simpler terms authentication is the process of verifying oneself, while authorization is the process of verifying what you have access to.