Product scope
What it does
Access is layered, not flat: role permissions, your plan's included features, tenant isolation and record-level section scoping are all checked on every request — and permission changes take effect immediately, because they resolve fresh per request instead of living in a stale token. Payroll is deliberately split from HR, so an HR clerk can edit the directory but can't touch pay.
The school problem
School teams need a dependable way to handle Role & Permission: Granular access control. The required records, assigned roles and review boundary must remain explicit.
