In the AAA security framework (Authentication, Authorization, Accounting), a user session begins after successful authentication. Once authenticated, the user's identity is established and a session can be tracked. Authorization determines what the authenticated user can access.