google zanzibar

a batteries-included system for building authorization in your application — with support for role-based access control (rbac), authorization across microservices, and a declarative policy language to support any use case.