Weinong Wang

In general, metric name should follow the best practice [here](https://prometheus.io/docs/practices/naming/#metric-names) and be namespaced

support access control using additional claims in id_token

1

in some OIDC provider such as Azure Active Directory it's possible to configure the client application to emit groups claim (or roles claim). For instance, [this](https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-fed-group-claims) and [that](https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/app-roles). With these...