Fingerprint is an authentication mechanism, not an authorization one.

It's both.