The Curity Identity Server supports three kinds of authorization managers: scope-based, group-based and attribute-based.
Custom Curity plugins must implement the AuthorizationManagerPluginDescriptor interface to provide an implementation of at least one of the possible Authorization Manager types: