Security


(*) = requires tenant authorization