**Check `role`**: Verify that the user’s role in the token matches the required authorization level for the action being requested. * Example: only teacher should be able to add a student to a cohort, delete a user from a cohort etc.
Activity
[-]BACKEND - Check role in cohort endpoints[/-][+]ENDPOINT - Check role in cohort endpoint[/+]