Assigning permissions via roles versus evaluating policies against attributes — the implementation tradeoffs of each.
Reference Q&A for this concept is coming soon.
