The rbac authorization service decides if the authenticated identity or guest has access to certain parts of the application