authzA directive that specifies access-control requirements for queries and mutations. directive @authz( permission: String!) on FIELD_DEFINITION Arguments