Unverified50% confidenceConceptExact time
Organization-scoped custom roles are a permission management approach that lets a role belong only to a certain organization without affecting other tenants.
1
Sources
50%
Confidence
Long-term
Relevance
11/3/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedUnder the organization-scoped custom role mechanism, row-level or tenant-level access control policies are usually paired in: platform administrators see an aggregated view, organization administrators see only their own organization's role list, and ordinary users perceive a role only when it is granted.74% similarUnverifiedGlobal roles set the scope at the environment layer, with all organizations sharing the same role definition; organization-scoped custom roles push the scope down to the organization layer, making the role a private asset within the organization.73% similarUnverifiedUnder the global role model, meeting an individual customer's special role needs can only be done by modifying existing global roles or adding new global roles, and both affect all organizations.69% similarUnverifiedIn multi-role mode, the roles corresponding to the various groups a user belongs to stack and take effect, forming a complete permission set.64% similarUnverifiedIt should be possible to distinguish whether an Agent is acting 'as a user' or 'on behalf of a user,' and to define permissions for it separately.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1131805API
curl https://kongchang.com/api/v1/knowledge/claims/1131805MCP
get_claim(id=1131805)