Schema map & relationships — Who can do what

• You must be signed in to open the Schema map. • The schema map and the one-off link picker show only workspaces you are a member of — never other tenants' data. • A link is created only when both records live in workspaces you belong to; the server rejects anything else. • Dragging a new relation on the schema map is accepted by the server only for tables in workspaces you belong to. • The multi-level concept page is restricted to super admins via an app-operator allowlist — workspace Admin is not enough.