Starburst interview question

How would you explain the difference between authentication and authorization to a non-technical person?