Platform staff only. Access is granted by a platform_admins row — never a client claim.
platform_admins