User APIs and Authentication

What are the levels of granularity you can implement, to make sure the right people can access your applications, but non-authorized users are kept out? Lear...