title: How do we implement permissions in ASP.NET identity?
body: <p>We understand how to implement authentication and authorization in ASP.NET identity with the WebApi.
  For instance, we can log a user in and then retrieve both his secure token and role. </p>
  
  <p>We now want to add permissions. For instance, user <strong>steve</strong> may be in the <strong>admin</strong> role. Now we want to assign <strong>read, edit, and delete</strong> permissions to the admin role. How do we do that in ASP.NET Identity? Is there existing permissions infrastructure in ASP.NET Identity?</p>