Access Control

ExposureX uses a layered model:

1. Tenant membership.
2. Roles and permissions.
3. Groups and data scope.
4. API-key scopes for automation.

Owner/admin users bypass most tenant permission gates; members require explicit permissions.