Authorization: roles

[ojongerius]

@Bouncey / @raisedadead you guys have much more context / knowledge on this domain than I do at the moment.

Have you guys looked in roles at all? I know Auth0 'Authorization extensions' support rules that can automatically populate user profiles with roles. Would this be the preferred mechanism to distinguish future third parties building on our platform from regular users? I bring this up while we are laying the foundations for this at the moment.

I'd love to discuss this during our next meeting, but maybe one of you could shed some light on this.