Skip to content

Overview

Tenant-scoped access profiles. A role optionally pins a repository override and narrows the skill set (skill_access). Role names are unique per tenant, which makes provisioning replay-safe.