Authorization

Authorization is evaluated per resource. Resources that the caller is not permitted to read are excluded from all aggregates and group counts without any error surfaced to indicate which resources were excluded. The number of excluded resources is reported via Metrics.UnauthorizedGroupCount.