A local authorization service running on a host can authorize a user logged into just that local host computer.
https://d3fend.mitre.org/dao/artifact/d3f:LocalAuthorizationService/