[AlphaSite]

Does the token identify every resource you have access to? I think is for multi tenant applications with fine grained access control.