RBAC & SSO

Roles

Role	Permission
Owner	Everything, including tenant settings and billing
Admin	Agents, playbooks, integrations, team
Operator	Alert triage, execute playbooks
Analyst	Read-only + AI explanation
Viewer	Read-only

SAML SSO

Plan: Team / Enterprise. ACS URL: https://app.monsys.ai/api/auth/saml/{tenant-slug}.

SCIM

Plan: Enterprise. Endpoint: https://api.monsys.ai/scim/v2/{tenant-slug} with bearer token.