Who you are (authentication) and what you can do (authorization). But for iPhone they are effectively one and the same since there's only one account on the phone. You can only authenticate as the phone's primary user, after which point you have full authority.

When, Oh When!, will my kids get their own home screen and separate sandbox, limits, etc. when I hand them my phone?!