What is the difference between a role and a claim (in Noumena)?

A role is a "bag of rights" assembled in an identity system (like Keycloak or Azure Entra); a claim is an individual attribute — a functional right or a data scope — that gets combined in a party.

Roles bundle rights for easy assignment during onboarding, while the underlying claims (rights plus access scopes) are what a protocol actually checks. Onboarding a user is then just granting the right role and data scope.