<!-- TIER:1 -- Managing Users A user (internally called an "ashare") represents a person's access grant to a Celigo account, defining what they can see and do. Concerns when managing users: - Access strategy -- choosing between account-wide access (administrator, manage, monitor) and per-integration access for least-privilege control - Integration-level permissions -- granting manage or monitor access to specific integrations, optionally combined with account-wide monitor as a baseline - Security enforcement -- requiring MFA or SSO per user to meet compliance requirements - Feature flags -- w…