Appearance
Authentication and authorisation of clients is performed when clients call web APIs that facilitate modification of data.