AccessGrant gives Rails apps a role-based access control system where permissions live in the database and can be reassigned to roles by tenant admins at runtime, with no deploy required. Unlike Pundit/CanCanCan/Action Policy (which hardcode permission logic in Ruby policy/ability classes) or Rolify (which manages role assignment but has no concept of permissions), AccessGrant ships a code-defined permission catalog synced into the database, dynamic per-tenant roles, and a permitted?(key) check.