TODO: Replace internal secret controls with real admin authentication before exposing this area beyond local/internal operators.

Roles

Default SaaS roles and permission catalog.

Roles and permissions

RoleScopePermission catalog