Nothing's a "given". No way to know if non-granular "user" and "admin" are sufficient. For a lot of apps they are. For many it's more of a "user of a group" an

Nothing's a "given". No way to know if non-granular "user" and "admin" are sufficient. For a lot of apps they are. For many it's more of a "user of a group" and "admin of a group" which is still straight-forward. Granular authorization can be a challenge if it wasn't architected in at the beginning, but even then it just depends. In terms of authenticating against providers, who knows. For me, local auth, Google, FB, Twitter, and GH are more than enough, but your needs may vary.