[Authorize]
public class MyController: Controller
{
    [HttpGet("/products")]
    [Authorize(Roles = "Administrator")]
    public IActionResult ListProducts()
   {
           // ...
   }

   [HttpGet("/products")]
   [Authorize(Roles = "Supervisor")]
   public IActionResult ListProducts()
   {
           // ...
   }
}