Abstract: Systems and methods for determining granular authorization of an authorization request for a user operation are provided. In particular, a computing device may receive the authorization request from a user requesting to perform the user operation on a resource, authenticate the user based on identity information included in the authorization request, evaluate the authorization request to identify one or more authorization claims for performing the user operation on the resource, determine one or more claim providers for generating the one or more authorization claims, and fetch the one or more authorization claims from the one or more claim providers. The computing device may further evaluate one or more authorization policies for determining whether the user is authorized to perform the user operation on the resource and determine permissions granted for the authorization request based on the evaluating the one or more authorization policies and the one or more authorization claims.