> ## Documentation Index
> Fetch the complete documentation index at: https://doc.lucidworks.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication and Authorization APIs

[localhost link]: http://localhost:3000/docs/4/fusion-server/reference/api/authentication-and-authorization-apis/overview

[mintlify link]: https://doc.lucidworks.com/docs/4/fusion-server/reference/api/authentication-and-authorization-apis/overview

[old doc.lw link]: https://doc.lucidworks.com/fusion-server/4.2/341

The Fusion [access control](/docs/4/fusion-server/concepts/security/access-control/overview) component handles user authentication and authorization.
It runs in the same process as the Fusion UI and provides the following sets of endpoints:
import { LwTemplate } from '/snippets/LwTemplate.jsx';

<LwTemplate />

* [User API](/docs/4/fusion-server/reference/api/authentication-and-authorization-apis/user-api): create, update, delete and list user records in Fusion.
* [Roles API](/docs/4/fusion-server/reference/api/authentication-and-authorization-apis/roles-api): create, update, delete and list roles which grant users different levels of permissions in the system.
* [Realms API](/docs/4/fusion-server/reference/api/authentication-and-authorization-apis/realms-api): create, update, delete and list realms.
* [Sessions API](/docs/4/fusion-server/reference/api/authentication-and-authorization-apis/sessions-api): create an authenticated session and session cookie.