Abstract: A system and method for receiving an authorization request, the authorization request including a first resource identifier including one or more path segments; processing the resource identifier uniquely identifying a set of resources in the microservice environment by: (a) determining whether a set of permissions is associated with the resource identifier is present in a resource access manager; (b) recording the set of permissions when present; (c) decatenating an end path segment from the resource identifier based on a delimiter; and (d) determining whether no path segments remain in the resource identifier after decatenation of the end segment, wherein (a), (b), (c) and (d) are repeated until it is determined that no path segments remain in the resource identifier; and responsive to determining no path segments remain in the resource identifier, returning an aggregated set of recorded permissions representing the complete set of effective permissions.