I suggest looking into authorization (not to be confused with authentication. Most auth (authentication) providers also provide a authorization framework you can integrate with.

The implementation details will vary wildly depending upon your exact needs.