[algebra-pretext]

I’m not too familiar with the space, but a friend of mine works at Descope[0] where they offer IAM solutions for agents.

[0] https://www.descope.com/

[xinbenlv]

is the permission device+client based or role based?