Abstract: Techniques for orchestrating field-level access control in distributed microservices environments are disclosed. An interceptor module embedded within each microservice intercepts incoming requests before they reach the application logic. The interceptor identifies the requesting actor, retrieves relevant field-level access control policies, and evaluates them to determine granular field-level permissions. Requests are only authorized to proceed if the actor has appropriate field-level access. The interceptor also filters outgoing responses to remove any fields the actor lacks permission to view. The system utilizes a distributed cache to store policies and permissions, improving performance. Policies can include tenant identifiers, caveats expressed in a domain-specific language, target resource types, and granular field privileges.