Global service availability
Turn a service on or off across the whole platform.
Tenant service access
Grant or restrict a service per tenant account.
Workspace service access
Scope enablement to a specific workspace.
Environment service access
Allow sandbox but not production, or vice versa.
Plan-based access
Gate a service to specific pricing plans.
Runtime enforcement
Every API call checks access before allowing usage.