Microsoft Identity Claims: Granular Authorizations, Part 1 https://www.danylkoweb.com/Blog/microsoft-identity-claims-granular-authorizations