We've added two new tenant permissions to give you more control over how you manage users.

• USER_READ – View all users in your tenant, including their email, role, and team memberships.

• USER_MANAGE – Manage users across your tenant, including inviting users, adding or removing them from teams, changing their team roles, and updating their active status.