Using only ID Token, with own roles/permissions database

[moticom]

In my Api’s the functions in the api are working based on roles, so in this case can I just use the id token to return the role and that’s it? Because all of my api’s can be accessed by all users, what’s returned/processed is based on the role.