Authorization is complex and creates problems in microservice-based applications. Existing approaches either mix authorization logic with application code (making it hard to understand and update) or centralize authorization data, leading to tough data synchronization. A new service called Oso Cloud solves these issues with policy-based logic and a new distributed authorization architecture, allowing developers to define logic centrally while still using local data to make authorization decisions.