Roles in ClaimsPrincipal

Product: PowerShell Universal
Version: 1.4.6

Curious how this works. I see that I can assign two roles to say an API endpoint. My user can login using either role. One is Admin the other is a custom role. Claims principal only contains the Admin role.

How does role assignment work? Should all roles be inside of the claims principal or does it behave differently with different roles, or adds one then stops?

I’m asking because one endpoint could have multiple roles hitting it but internal to that endpoint one role might be able to retrieve more data than the other. I know I could create a new route but I prefer not to create duplicate routes for this… and… it would break the front end.

Thanks