Manage server users and their database access permissions.
Manage security groups that define per-type CRUD permissions and database-level access.
Manage long-lived API tokens for programmatic access (MCP, REST API integrations).