mAGI Granular User-Level Agent Permissions

Admins can now control mAGI access at the individual user level. A new "mAGI" permission has been added to the Roles page (Settings → Users → Roles), directly below the Agents section, with a toggle for "View / Chat Access to Centralized mAGI." When enabled, a user can see mAGI in their left navigation and chat with it; when disabled, mAGI is hidden and chat is unavailable for that role. This lets you roll mAGI out to specific teams or users instead of turning it on for everyone at once.

Editing mAGI's configuration requires this new access plus Agent Super Admin. Integrator Ian, the built-in smart connector for data sources, continues to be governed by the existing "Manage Networks" permission — users with that permission can create and manage data sources directly or through Integrator Ian within mAGI. The new permission is off by default, so existing roles won't gain mAGI access automatically; grant it per role when you're ready.