Model multi-team membership separately from role
Represent team membership and role or organization policy as separate authority dimensions. A user may belong to several teams, while an organization-wide role may resolve to all teams and a narrowly scoped role may remain narrow despite extra membership rows. Compute access fro…