
Flat roles first, hierarchy when you need it
Every Canopy Environment starts flat, on a single root node. Adding the hierarchy later is a configuration change rather than a migration.
Engineering notes from Canopy IO: authentication, organizational hierarchy and role-based access control, and the design decisions behind them. Originals at canopy-io.com/blog.