The process of controlling and managing which internal users or systems within an organization have authorization to access and retrieve credit reports and data from credit bureaus.