Other elements under the requirements section control whether a given user has access to the route once it has been matched. You can add multiple elements and they must all succeed in order to provide access. The default action is to deny access, so if you do not provide any criteria, access will be denied.