Extending the Factory Organization Model with User Groups

Factory introduced User Groups, which sync from an identity provider via Directory Sync and let admins set usage limits and model access per group, mapped into chosen organizations. Settings resolve per request in a hierarchy where an individual override wins, then the user's group settings in that organization, then the organization default; for limits the highest group limit applies, and for model access a model is allowed if any of the user's groups allows it. Groups are configured in the Enterprise Admin Console, group limits can be managed through the Organization API up to 100 groups per request, and changes are recorded in the audit log.