# Permission group akP-jellyfin-user (name = filename). Does NOT gate the
# jellyfin application (SSO access is gated by the media groups akP-media-fafflix
# / akP-media-cheeztv). It exists purely as a user role-claim group: the
# jellyfin-plugin-sso matches the hierarchical `ak_groups` claim against this
# group name for regular (non-admin) Jellyfin access. Nested under akR-standard-user.
attributes: {}