Handle Access Controls At Server-Side

Organizations should only trust server-side authentication & authorization as it applies the same controls to all services, users, and applications. Security teams and developers should develop a template for the separation of duties. For instance, Role templates help the server validate requests based on permissions associated with the specific role and not grant access to unauthorized users.