# RBAC Concept

Built-in roles:

- Super Admin
- Network Admin
- Security Admin
- Tenant Admin
- Auditor
- Read Only User

Permissions are stored as strings and can use wildcard entries. Tenant and project scoping should be enforced in query services as the implementation matures.