The process of authorization is distinct from that of authentication.
Similarly when someone tries to log on a computer, they are usually first requested to identify themselves with a login name and support that with a password.