Team members of a tenant (one role-scoped key per member). Owner/Admin manage; everyone can list. In production an invite emails the member; in the demo the seat is provisioned directly and the person inherits the role when they sign in.