as an example, could one of your tokens have read access to, say, a specific resource, like a document?