Governance

Two different questions, answered by two different mechanisms. Keeping them apart solves most confusion here:

• "What may this person do to Elaichi?" → roles, built from permissions. Invite people, create toolboxes, read the whole audit log.
• "What may this person reach through Elaichi?" → restrictions. Which connectors and tools, enforced everywhere, MCP included.

A third layer sits under both: sharing grants on single resources. A permission never stands in for a grant. connection:manage lets you manage a connection you hold a grant on, and reaches no connection you do not. No permission widens what you can see, Org Owner included.

Roles

Eight ship with every organization. Six form a strict chain, each the one below plus more: