Authorize Attribute with Policy

AdministrationController.cs

[Route("api/[controller]"), Authorize(Roles = "Administrator")]
public class AdministrationController : Controller
{
	// ... restante do código omitido

	[HttpDelete, Route("accounts/{accountId}"), Authorize(Policy = "DeleteUserPolicy")]
	public async Task<IActionResult> DeleteAccount(Guid accountId)
	{
		var command = new RemoveAccount(accountId);
		var response = await _mediator.Send(command);

		if (response.HasMessages)
		{
			return BadRequest(response.Messages);
		}
		return Ok();
	}
}