We are evaluating authorization architectures for a multi-tenant platform with complex role hierarchies and custom permission sets per tenant. What are the pros