Authenticate and authorize users. Create and maintain policies that govern access to services and resources. Verify that claimed identities are genuine and based on valid credentials.