What is claims-based authorization?

Claims-based authorization makes decisions using attributes carried or derived for an authenticated identity, such as tenant, department, entitlement, assurance level, or subscription. Claims provide finer context than a single role name.