Role-based access controls for Enterprise plans

Admins can now organize users into groups (manually or via SCIM) and assign custom roles defining which Claude capabilities members can use. Enables granular control over Claude Cowork access and feature restrictions by department.