Let's say one service is a Kubernetes cluster, and another is a storage service. Each service has its own set of associated permissions.