Type Alias: AppServiceGrantedRole

type AppServiceGrantedRole = 
  | KappappsRoleType
  | "viewer";

Minimum Kappapps role for an AI service call on behalf of a user. null/omitted and 'viewer' allow everyone; 'superadmin' means the channel owner. Direct app/widget calls use scopes and domains, without checking a user role. The 'viewer' alias is specific to services, not a general Kappapps role.