API transactions are subjected to many authorization decisions at many different layers. User identities, application scopes, attributes, roles, data privacy, user consent, contracts… Tidy up your decision-making responsibilities across your stack. This presentation will discuss the benefits and tradeoffs of decoupling authorization from service implementation.