I used AI tools to help draft and edit this post. I checked the facts and the wording, and the original lives at geekindata.com . The diagrams are on that page.

Front door. Catalog. Corpus. Three questions.

Key takeaways

A sign-in group (for example an app users group) gates the shell only; it is not every product permission.

Backend API app roles own agent access and knowledge category access; enforce on every sensitive call.

One authorization module serves agent list, chat, browse, and content reads.

The SPA consumes capability endpoints; it does not parse roles from the JWT.

Citations and downloads use the same path rules as chat.…