I’m working on a Django REST Framework API where I need to return a list of projects along with their assigned employees and each employee’s departm

We are evaluating authorization architectures for a multi-tenant platform with complex role hierarchies and custom permission sets per tenant. What are the pros