Identity, access, tenancy, privacy, and licensing

This section explains who may use Cluster ERP and what each person may see and do. It covers sign-in and sessions, the second factor of the operator console, roles and permission codes, attribute-based policies, field and row access, approval chains, notification rules, the database-per-tenant model, self-service signup, data-subject requests, app licensing and entitlements, and the operator console. The code lives in src/cluster_erp/modules/auth/, src/cluster_erp/modules/privacy/, src/cluster_erp/modules/app_store/, src/cluster_erp/core/, and src/cluster_erp/server/. Every page describes mechanisms and settings only, under the security disclosure policy of the documentation standard.