diff --git a/pkg/njwt/claims.go b/pkg/njwt/claims.go
index 4a93641..88ced07 100644
--- a/pkg/njwt/claims.go
+++ b/pkg/njwt/claims.go
@@ -50,7 +50,7 @@ func NewClaim(issuer string, expiration time.Duration, pc interface{}) *Claim {
 type AuthxClaim struct {
 	// UserID internal napptive user identifier.
 	UserID string
-	// Username is the unique name of the user, currently the github account name.
+	// Username is the unique name of the user, currently the GitHub account name.
 	Username string
 	// AccountID with the actual account identifier
 	AccountID string
@@ -79,6 +79,25 @@ type UserAccountClaim struct {
 	Role string
 }
 
+// NewAuthxClaim creates a new instance of AuthxClaim.
+func NewAuthxClaim(userID string, username string,
+	accountID string, accountName string,
+	environmentID string, accountAdmin bool,
+	zoneID string, zoneURL string, accounts []UserAccountClaim) *AuthxClaim {
+	return &AuthxClaim{
+		UserID:             userID,
+		Username:           username,
+		AccountID:          accountID,
+		AccountName:        accountName,
+		EnvironmentID:      environmentID,
+		AccountAdmin:       accountAdmin,
+		ZoneID:             zoneID,
+		ZoneURL:            zoneURL,
+		EnvironmentAccount: accountID,
+		Accounts:           accounts,
+	}
+}
+
 func (ac *AuthxClaim) AccountsToString() (string, error) {
 	account, err := json.Marshal(ac.Accounts)
 	if err != nil {
@@ -117,25 +136,6 @@ func (ac *AuthxClaim) ToMap() map[string]string {
 	}
 }
 
-// NewAuthxClaim creates a new instance of AuthxClaim.
-func NewAuthxClaim(userID string, username string,
-	accountID string, accountName string,
-	environmentID string, accountAdmin bool,
-	zoneID string, zoneURL string, accounts []UserAccountClaim) *AuthxClaim {
-	return &AuthxClaim{
-		UserID:             userID,
-		Username:           username,
-		AccountID:          accountID,
-		AccountName:        accountName,
-		EnvironmentID:      environmentID,
-		AccountAdmin:       accountAdmin,
-		ZoneID:             zoneID,
-		ZoneURL:            zoneURL,
-		EnvironmentAccount: accountID,
-		Accounts:           accounts,
-	}
-}
-
 // Print the contents of the claim through the logger.
 func (ac *AuthxClaim) Print() {
 	log.Info().Str("user_id", ac.UserID).Str("username", ac.Username).
@@ -143,6 +143,22 @@ func (ac *AuthxClaim) Print() {
 		Str("environment_id", ac.EnvironmentID).Bool("account_admin", ac.AccountAdmin).Str("zone_id", ac.ZoneID).Str("zone_url", ac.ZoneURL).Msg("AuthxClaim")
 }
 
+// IsAuthorized checks if the user (claim) has permissions to operate in an account
+func (ac *AuthxClaim) IsAuthorized(accountName string, adminRoleRequired bool) bool {
+
+	authorized := false
+
+	for _, account := range ac.Accounts {
+		if account.Name == accountName {
+			if adminRoleRequired {
+				authorized = account.Role == "Admin"
+			}
+			return authorized
+		}
+	}
+	return authorized
+}
+
 // GetAuthxClaim returns the AuthxClaim section of the claim.
 func (c *Claim) GetAuthxClaim() *AuthxClaim {
 	return c.PersonalClaim.(*AuthxClaim)