Hi Adnan,
Cerbos focuses on authorization and doesn’t maintain records of users and their role assignments. Cerbos has a concept of a
derived role, which is calculated based on a parent role (the role assigned to a user) and some user attributes. A user can have many derived roles. If Clerk allows adding attributes to a user, this might be enough to write Cerbos policies in terms of derived roles.