Abstract: The network access level that is granted to a client device can be controlled based on feature-based tokens in some examples. In one such example, an authorization server system of a computer network can receive a request originating from a client device. In response to receiving the request, the authorization server system can retrieve a set of tokens from the request. The set of tokens may have previously been generated by a set of components in the computer network while propagating the request from the client device to the authorization server system. The authorization server system can then determine access rules by applying a predefined security policy to the features specified in the set of tokens. The authorization server system can control the client device's access within the computer network based on the determined access rules.