Authorizations in PAS include one or more characters in a string. An exact match requires that all of the same characters are included, and only those characters are included. The order of the characters does not matter.