RBAC and Permissions

Roles: super_admin (platform), company_admin (org), user (personal). Fine-grained: OrgRole (named, per-org), Permission keys (users.read, billing.manage, etc.), M2M mappings. Model Access per team/tenant with bulk management. Super-admin / company_admin orgId fallback is preserved on SCIM and SSO admin routes.

Scoping dimensions: user → team → organization → model → MCP server → tool → gateway route → guardrail policy → enrichment plugin → schema. Each scope is independently grantable through OrgRolePermission mappings, so a team can be granted read-only access to one MCP server while another team gets full invocation rights on a different one.

Audit-log access: audit.read permission is itself granular — separable from audit.export so SOC analysts can investigate without being able to exfiltrate.

---