Design role-based and attribute-based access control (RBAC/ABAC), temporary credentials, and federation.
