Authorisation
Roles User can be added to one or more roles. When the user is authenticated, these role memberships can be included in the authentication token. Claims Terminology to describe what the user has claims to (i.e. who they are and what privileges they have). JWT Tokens As well as containing the claims to be who they are, role memberships can be passed as claims so that the client application can expose / restrict areas of the application as that are applicable. Policies These are the rule sets that determine whether a service can be accessed (authorisation). Roles and other logic can be used to determine a policy.