AuthZ - Explicit Capability Mapping