Domain Scoped Roles - Early Access

Introduced Domain Scoped Roles and Domain Groups for more granular user access management within enterprise accounts. This is powered by a new permission system called Bach, which allows for policy-based authorization with resource scoping, moving beyond the legacy role-based system. Bach enables finer-grained permissions and resource scoping, allowing for more explicit control over what actions users can perform on specific resources like domains.