# Permission group akP-jellyfin-admin (name = filename). Does NOT gate the
# jellyfin application (SSO access is gated by the media groups akP-media-fafflix
# / akP-media-cheeztv). It exists purely as an admin role-claim group: the
# jellyfin-plugin-sso matches the hierarchical `ak_groups` claim against this
# group name to grant Jellyfin administrator rights. Nested under akR-global-admin.
attributes: {}