Multi-tenant RBAC
Organizations, users, and four fixed roles govern access across both the proxy and the management API.
- Four roles — Admin, Resource Manager, Reporter, User — each mapping to a fixed permission set enforced via OIDC scopes issued by penguin-aaa.
- Admin: full system access across all organizations. Resource Manager: scoped to their own organization. Reporter: read-only analytics. User: personal virtual keys only.
- Organization-level usage endpoints (GET /organizations/{id}/usage) and per-org quota management.