User log-in and sign-up are considered authentication but from an authorization perspective Permify domain specific language also supports coarse grained roles (RBAC). See following playground example[0]. Also don't hesitate to join our Discord community[1] for further questions.