Field-level authorization in GraphQL is necessary when access to the data needs to be restricted on a per-field basis. In this granular authorization approach, different fields on the same model can be made visible to users based on, for example, whether they own the data or whether they were by some means granted access to it.