docs(roadmap): add Phase 15 module permissions (groups & user grants)
Two-level module access: tenant activation stays a prerequisite, plus new per-group and per-user grants. Records the four design decisions taken with the user: Tessera-owned groups with optional AD binding, closed-by-default access, ADMIN/SUPER_ADMIN bypass within their tenant, and access on/off only (no permission levels inside modules). Starts milestone v1.2. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
Reference in New Issue
Block a user