How to organize the API and table structure for assigning roles in CRM?

Question

API

There is a need to describe the API logic for CRM on Laravel. This logic will include the ability to determine whether the user has access to certain data. Access must be through roles : manager, administrator and all that.

Question: how best to implement the logic of roles and data access in the context of Laravel?

Just in case, I repeat, there will only be an API on the lara, the front will be a separate application

Answer 1

I always use laratrust when there are more than 2 roles, it works flawlessly