diff --git a/assets/js/app.js b/assets/js/app.js
index d5e278a..c68afbe 100644
--- a/assets/js/app.js
+++ b/assets/js/app.js
@@ -22,10 +22,16 @@ import {Socket} from "phoenix"
 import {LiveSocket} from "phoenix_live_view"
 import topbar from "../vendor/topbar"
 
+// assets/js/app.js
+
+// Add custom hookds like "select-all" permissions 
+import Hooks from "./hooks";
+
 let csrfToken = document.querySelector("meta[name='csrf-token']").getAttribute("content")
 let liveSocket = new LiveSocket("/live", Socket, {
   longPollFallbackMs: 2500,
-  params: {_csrf_token: csrfToken}
+  params: { _csrf_token: csrfToken },
+  hooks: Hooks // <-- Add imported hooks so we can use it on our page
 })
 
 // Show progress bar on live navigation and form submits
diff --git a/assets/js/hooks.js b/assets/js/hooks.js
new file mode 100644
index 0000000..1d3b650
--- /dev/null
+++ b/assets/js/hooks.js
@@ -0,0 +1,35 @@
+// assets/js/hooks.js
+let Hooks = {};
+
+Hooks.SelectAllPermissions = {
+  mounted() {
+    this.el.addEventListener("change", (event) => {
+      const groupId = this.el.dataset.groupId;
+      const isChecked = event.target.checked;
+      const checkboxes = document.querySelectorAll(
+        `#access-group-permissions-${groupId} .permission-checkbox`
+      );
+      checkboxes.forEach((checkbox) => {
+        checkbox.checked = isChecked;
+      });
+    });
+  }
+};
+
+Hooks.SelectResourcePermissions = {
+  mounted() {
+    this.el.addEventListener("change", (event) => {
+      const resource = this.el.dataset.resource;
+      const groupId = this.el.dataset.groupId;
+      const isChecked = event.target.checked;
+      const checkboxes = document.querySelectorAll(
+        `#access-group-permissions-${groupId} .permission-checkbox[data-resource="${resource}"]`
+      );
+      checkboxes.forEach((checkbox) => {
+        checkbox.checked = isChecked;
+      });
+    });
+  }
+};
+
+export default Hooks;
\ No newline at end of file
diff --git a/lib/helpcenter.ex b/lib/helpcenter.ex
index 0054bea..e3ec933 100644
--- a/lib/helpcenter.ex
+++ b/lib/helpcenter.ex
@@ -1,3 +1,4 @@
+# /home/kamaro/elixir/helpcenter/lib/helpcenter.ex
 defmodule Helpcenter do
   @moduledoc """
   Helpcenter keeps the contexts that define your domain
@@ -6,4 +7,6 @@ defmodule Helpcenter do
   Contexts are also responsible for managing your data, regardless
   if it comes from the database, an external API or others.
   """
+
+  defdelegate permissions(), to: Helpcenter.Accounts.Permission
 end
diff --git a/lib/helpcenter/accounts.ex b/lib/helpcenter/accounts.ex
index 0d6f8ba..dd0c71c 100644
--- a/lib/helpcenter/accounts.ex
+++ b/lib/helpcenter/accounts.ex
@@ -1,11 +1,18 @@
+# lib/helpcenter/accounts.ex
 defmodule Helpcenter.Accounts do
-  use Ash.Domain,
-    otp_app: :helpcenter
+  use Ash.Domain, otp_app: :helpcenter
 
   resources do
+    # Authentication
     resource Helpcenter.Accounts.Token
     resource Helpcenter.Accounts.User
     resource Helpcenter.Accounts.Team
     resource Helpcenter.Accounts.UserTeam
+
+    # Authorization
+    resource Helpcenter.Accounts.Group
+    # Delete this resource Helpcenter.Accounts.Permission
+    resource Helpcenter.Accounts.GroupPermission
+    resource Helpcenter.Accounts.UserGroup
   end
 end
diff --git a/lib/helpcenter/accounts/checks/authorized.ex b/lib/helpcenter/accounts/checks/authorized.ex
new file mode 100644
index 0000000..3ad6b70
--- /dev/null
+++ b/lib/helpcenter/accounts/checks/authorized.ex
@@ -0,0 +1,47 @@
+# lib/helpcenter/accounts/checks/authorized.ex
+defmodule Helpcenter.Accounts.Checks.Authorized do
+  use Ash.Policy.SimpleCheck
+  require Ash.Query
+
+  @impl true
+  def describe(_opts), do: "Authorize User Access Group"
+
+  @doc """
+  Returns true to authorize or false to deny access
+  If actor is not provide, then deny access by returning false
+  """
+  @impl true
+
+  def match?(nil = _actor, _context, _opts), do: false
+  def match?(actor, context, _options), do: authorized?(actor, context)
+
+  # """
+  # 1. If the actor is the team owner, then authorize since he's the owner
+  # 2. If none of the above, then check if the user has permission on the database
+  # """
+  defp authorized?(actor, context) do
+    cond do
+      is_current_team_owner?(actor) -> true
+      true -> can?(actor, context)
+    end
+  end
+
+  # Confirms if the actor is the owner of the current team
+  defp is_current_team_owner?(actor) do
+    Helpcenter.Accounts.Team
+    |> Ash.Query.filter(owner_user_id == ^actor.id)
+    |> Ash.Query.filter(domain == ^actor.current_team)
+    |> Ash.exists?()
+  end
+
+  # Confirms if the actor has required permissions to perform the current
+  # action on the current resource
+  defp can?(actor, context) do
+    Helpcenter.Accounts.User
+    |> Ash.Query.filter(id == ^actor.id)
+    |> Ash.Query.load(groups: :permissions)
+    |> Ash.Query.filter(groups.permissions.resource == ^context.resource)
+    |> Ash.Query.filter(groups.permissions.action == ^context.subject.action.type)
+    |> Ash.exists?(tenant: actor.current_team, authorize?: false)
+  end
+end
diff --git a/lib/helpcenter/accounts/group.ex b/lib/helpcenter/accounts/group.ex
new file mode 100644
index 0000000..741e0c2
--- /dev/null
+++ b/lib/helpcenter/accounts/group.ex
@@ -0,0 +1,74 @@
+# lib/helpcenter/accounts/group.ex
+defmodule Helpcenter.Accounts.Group do
+  use Ash.Resource,
+    domain: Helpcenter.Accounts,
+    data_layer: AshPostgres.DataLayer,
+    notifiers: Ash.Notifier.PubSub
+
+  postgres do
+    table "groups"
+    repo Helpcenter.Repo
+  end
+
+  actions do
+    default_accept [:name, :description]
+    defaults [:create, :read, :update, :destroy]
+  end
+
+  # Confirm how Ash will wor
+  pub_sub do
+    module HelpcenterWeb.Endpoint
+
+    prefix "groups"
+
+    publish_all :update, [[:id, nil]]
+    publish_all :create, [[:id, nil]]
+    publish_all :destroy, [[:id, nil]]
+  end
+
+  preparations do
+    prepare Helpcenter.Preparations.SetTenant
+  end
+
+  changes do
+    change Helpcenter.Changes.SetTenant
+  end
+
+  multitenancy do
+    strategy :context
+  end
+
+  attributes do
+    uuid_v7_primary_key :id
+
+    attribute :name, :string do
+      description "Group name unique name"
+      allow_nil? false
+    end
+
+    attribute :description, :string do
+      description "Describes the intention of the group"
+      allow_nil? false
+    end
+
+    timestamps()
+  end
+
+  relationships do
+    many_to_many :users, Helpcenter.Accounts.User do
+      through Helpcenter.Accounts.UserGroup
+      source_attribute_on_join_resource :group_id
+      destination_attribute_on_join_resource :user_id
+    end
+
+    # lib/helpcenter/accounts/group.ex
+    has_many :permissions, Helpcenter.Accounts.GroupPermission do
+      description "List of permission assigned to this group"
+      destination_attribute :group_id
+    end
+  end
+
+  identities do
+    identity :unique_name, [:name]
+  end
+end
diff --git a/lib/helpcenter/accounts/group_permission.ex b/lib/helpcenter/accounts/group_permission.ex
new file mode 100644
index 0000000..664b054
--- /dev/null
+++ b/lib/helpcenter/accounts/group_permission.ex
@@ -0,0 +1,48 @@
+# lib/helpcenter/accounts/group_permission.ex
+defmodule Helpcenter.Accounts.GroupPermission do
+  use Ash.Resource,
+    domain: Helpcenter.Accounts,
+    data_layer: AshPostgres.DataLayer,
+    notifiers: Ash.Notifier.PubSub
+
+  postgres do
+    table "group_permissions"
+    repo Helpcenter.Repo
+  end
+
+  actions do
+    default_accept [:resource, :action, :group_id]
+    defaults [:create, :read, :update, :destroy]
+  end
+
+  preparations do
+    prepare Helpcenter.Preparations.SetTenant
+  end
+
+  changes do
+    change Helpcenter.Changes.SetTenant
+  end
+
+  multitenancy do
+    strategy :context
+  end
+
+  attributes do
+    uuid_v7_primary_key :id
+    attribute :action, :string, allow_nil?: false
+    attribute :resource, :string, allow_nil?: false
+    timestamps()
+  end
+
+  relationships do
+    belongs_to :group, Helpcenter.Accounts.Group do
+      description "Relationshp with a group inside a tenant"
+      source_attribute :group_id
+      allow_nil? false
+    end
+  end
+
+  identities do
+    identity :unique_group_permission, [:group_id, :resource, :action]
+  end
+end
diff --git a/lib/helpcenter/accounts/permission.ex b/lib/helpcenter/accounts/permission.ex
new file mode 100644
index 0000000..404b479
--- /dev/null
+++ b/lib/helpcenter/accounts/permission.ex
@@ -0,0 +1,30 @@
+# lib/helpcenter/accounts/permission.ex
+defmodule Helpcenter.Accounts.Permission do
+  @doc """
+  Get a list of maps of resources and their actions
+  Example:
+    iex> Helpcenter.Accounts.Permission.get_permissions()
+    iex> [%{resource: Helpcenter.Accounts.GroupPermission, action: :create}]
+  """
+
+  def permissions() do
+    get_all_domain_resources()
+    |> Enum.map(&map_resource_actions/1)
+    |> Enum.flat_map(& &1)
+  end
+
+  defp map_resource_action(action, resource) do
+    %{action: action.name, resource: resource}
+  end
+
+  defp map_resource_actions(resource) do
+    Ash.Resource.Info.actions(resource)
+    |> Enum.map(&map_resource_action(&1, resource))
+  end
+
+  defp get_all_domain_resources() do
+    Application.get_env(:helpcenter, :ash_domains)
+    |> Enum.map(&Ash.Domain.Info.resources(&1))
+    |> Enum.flat_map(& &1)
+  end
+end
diff --git a/lib/helpcenter/accounts/user.ex b/lib/helpcenter/accounts/user.ex
index 0da4d81..35cca33 100644
--- a/lib/helpcenter/accounts/user.ex
+++ b/lib/helpcenter/accounts/user.ex
@@ -10,7 +10,7 @@ defmodule Helpcenter.Accounts.User do
   authentication do
     add_ons do
       log_out_everywhere do
-        apply_on_password_change?(true)
+        apply_on_password_change? true
       end
 
       confirmation :confirm_new_user do
@@ -301,6 +301,12 @@ defmodule Helpcenter.Accounts.User do
       source_attribute_on_join_resource :user_id
       destination_attribute_on_join_resource :team_id
     end
+
+    many_to_many :groups, Helpcenter.Accounts.Group do
+      through Helpcenter.Accounts.UserGroup
+      source_attribute_on_join_resource :user_id
+      destination_attribute_on_join_resource :group_id
+    end
   end
 
   identities do
diff --git a/lib/helpcenter/accounts/user_group.ex b/lib/helpcenter/accounts/user_group.ex
new file mode 100644
index 0000000..a6bb117
--- /dev/null
+++ b/lib/helpcenter/accounts/user_group.ex
@@ -0,0 +1,53 @@
+# lib/helpcenter/accounts/user_group.ex
+defmodule Helpcenter.Accounts.UserGroup do
+  use Ash.Resource,
+    domain: Helpcenter.Accounts,
+    data_layer: AshPostgres.DataLayer,
+    notifiers: Ash.Notifier.PubSub
+
+  postgres do
+    table "user_groups"
+    repo Helpcenter.Repo
+  end
+
+  actions do
+    default_accept [:user_id, :group_id]
+    defaults [:create, :read, :update, :destroy]
+  end
+
+  preparations do
+    prepare Helpcenter.Preparations.SetTenant
+  end
+
+  changes do
+    change Helpcenter.Changes.SetTenant
+  end
+
+  multitenancy do
+    strategy :context
+  end
+
+  attributes do
+    uuid_v7_primary_key :id
+
+    timestamps()
+  end
+
+  relationships do
+    belongs_to :group, Helpcenter.Accounts.Group do
+      description "Relationshp with a group inside a tenant"
+      source_attribute :group_id
+      allow_nil? false
+    end
+
+    belongs_to :user, Helpcenter.Accounts.User do
+      description "Permission for the user access group"
+      source_attribute :user_id
+      allow_nil? false
+    end
+  end
+
+  identities do
+    identity :unique_name, [:group_id, :user_id]
+  end
+end
diff --git a/lib/helpcenter/knowledge_base/category.ex b/lib/helpcenter/knowledge_base/category.ex
index d10dac4..061e6ee 100644
--- a/lib/helpcenter/knowledge_base/category.ex
+++ b/lib/helpcenter/knowledge_base/category.ex
@@ -1,9 +1,11 @@
+# lib/helpcenter/knowledge_base/category.ex
 defmodule Helpcenter.KnowledgeBase.Category do
   use Ash.Resource,
     domain: Helpcenter.KnowledgeBase,
     data_layer: AshPostgres.DataLayer,
-    # Tell Ash to broadcast/ Emit events via pubsub
-    notifiers: Ash.Notifier.PubSub
+    notifiers: Ash.Notifier.PubSub,
+    # Tell Ash that this resource require authorization
+    authorizers: Ash.Policy.Authorizer
 
   postgres do
     # <-- Tell Ash that this resource data is stored in a table named "categories"
@@ -36,6 +38,13 @@ defmodule Helpcenter.KnowledgeBase.Category do
     end
   end
 
+  policies do
+    policy always() do
+      access_type :strict
+      authorize_if Helpcenter.Accounts.Checks.Authorized
+    end
+  end
+
   # Confirm how Ash will wor
   pub_sub do
     # 1. Tell Ash to use HelpcenterWeb.Endpoint for publishing events
diff --git a/lib/helpcenter_web.ex b/lib/helpcenter_web.ex
index 6042b4a..53db98e 100644
--- a/lib/helpcenter_web.ex
+++ b/lib/helpcenter_web.ex
@@ -55,14 +55,43 @@ defmodule HelpcenterWeb do
       use Phoenix.LiveView,
         layout: {HelpcenterWeb.Layouts, :app}
 
+      @doc """
+      Global handling of event. This will fix error: no function clause matching in handle_info/2
+      due to predefined hooks in ZippikerWeb.Hooks.DefaultHooks
+      """
+      def handle_info({:put_flash, type, message}, socket) do
+        {:noreply, put_flash(socket, type, message)}
+      end
+
       unquote(html_helpers())
     end
   end
 
+  # lib/helpcenter_web.ex
   def live_component do
     quote do
       use Phoenix.LiveComponent
 
+      @doc """
+      Puts flash from a live components
+      ### Example
+        socket
+        |> put_component_flash(:info, "Saved!")
+        |> noreply()
+
+      """
+      def put_component_flash(socket, type, message) do
+        send(self(), {:put_flash, type, message})
+        socket
+      end
+
+      @doc """
+      Use Phoenix inbuild javascript executor to cancel modal
+      """
+      def cancel_modal(socket, id) do
+        push_event(socket, "js-exec", %{to: "##{id}", attr: "data-cancel"})
+      end
+
       unquote(html_helpers())
     end
   end
diff --git a/lib/helpcenter_web/components/layouts/app.html.heex b/lib/helpcenter_web/components/layouts/app.html.heex
index d638aa1..3ac7977 100644
--- a/lib/helpcenter_web/components/layouts/app.html.heex
+++ b/lib/helpcenter_web/components/layouts/app.html.heex
@@ -2,15 +2,41 @@
   <div class="flex items-center justify-between border-b border-zinc-100 py-3 text-sm">
     <div class="flex items-center gap-4">
       <a href="/">
-        <img src={~p"/images/logo.svg"} width="36" />
+        <p
+          :if={!@current_user}
+          class="bg-brand/5 text-brand rounded-full px-2 font-medium leading-6"
+        >
+          Helpcenter
+        </p>
+
+        <div
+          :if={@current_user}
+          class="bg-brand/5 text-brand rounded-full px-2 font-medium leading-6"
+        >
+          {@current_user.current_team |> Phoenix.Naming.humanize()}
+        </div>
       </a>
-      <p class="bg-brand/5 text-brand rounded-full px-2 font-medium leading-6">
-        v{Application.spec(:phoenix, :vsn)}
-      </p>
     </div>
     <div class="flex items-center gap-4 font-semibold leading-6 text-zinc-900">
       <%!-- Only show this div if the user is logged in --%>
-      <div :if={@current_user}>
+      <div :if={@current_user} class="space-x-6">
+        <.link
+          id="categories"
+          navigate={~p"/categories"}
+          class="text-sm font-semibold leading-6 text-zinc-900 hover:text-zinc-700 hover:underline"
+        >
+          <.icon name="hero-rectangle-group" class="h-4 w-4" />
+          {gettext("Categories")}
+        </.link>
+        <.link
+          id="accounts"
+          navigate={~p"/accounts/groups"}
+          class="text-sm font-semibold leading-6 text-zinc-900 hover:text-zinc-700 hover:underline"
+        >
+          <.icon name="hero-user-group" class="h-4 w-4" />
+          {gettext("Access Groups")}
+        </.link>
+
         <span class="px-3 py-2 text-sm font-medium rounded-md">
           {@current_user.email}
         </span>
diff --git a/lib/helpcenter_web/controllers/auth_controller.ex b/lib/helpcenter_web/controllers/auth_controller.ex
index 0d84554..50939e5 100644
--- a/lib/helpcenter_web/controllers/auth_controller.ex
+++ b/lib/helpcenter_web/controllers/auth_controller.ex
@@ -3,7 +3,7 @@ defmodule HelpcenterWeb.AuthController do
   use AshAuthentication.Phoenix.Controller
 
   def success(conn, activity, user, _token) do
-    return_to = get_session(conn, :return_to) || ~p"/"
+    return_to = get_session(conn, :return_to) || ~p"/categories"
 
     message =
       case activity do
diff --git a/lib/helpcenter_web/controllers/page_controller.ex b/lib/helpcenter_web/controllers/page_controller.ex
index b3ed374..7b7215a 100644
--- a/lib/helpcenter_web/controllers/page_controller.ex
+++ b/lib/helpcenter_web/controllers/page_controller.ex
@@ -9,7 +9,7 @@ defmodule HelpcenterWeb.PageController do
     # Retrieve categories with the articles
     categories =
       if team = Ash.read_first!(Helpcenter.Accounts.Team) do
-        Ash.read!(Category, load: :article_count, tenant: team.domain)
+        Ash.read!(Category, load: :article_count, tenant: team.domain, authorize?: false)
       else
         []
       end
diff --git a/lib/helpcenter_web/live/accounts/groups/group_form.ex b/lib/helpcenter_web/live/accounts/groups/group_form.ex
new file mode 100644
index 0000000..c20c7f5
--- /dev/null
+++ b/lib/helpcenter_web/live/accounts/groups/group_form.ex
@@ -0,0 +1,152 @@
+# lib/helpcenter_web/live/accounts/groups/group_form.ex
+defmodule HelpcenterWeb.Accounts.Groups.GroupForm do
+  use HelpcenterWeb, :live_component
+  alias AshPhoenix.Form
+
+  @doc """
+  This a wrapper used to access this component like a static component
+  in the template.
+
+  example:
+    <HelpcenterWeb.Accounts.Groups.GroupForm.form
+      :for={group <- @groups}
+      actor={@current_user}
+      group_id={group.id}
+      show_button={false}
+      id={group.id}
+    />
+
+  """
+  attr :id, :string, default: Ash.UUIDv7.generate()
+  attr :group_id, :string, default: nil
+  attr :show_button, :boolean, default: true, doc: "Show button to create new group"
+  attr :actor, Helpcenter.Accounts.User, required: true
+
+  def form(assigns) do
+    ~H"""
+    <.live_component
+      id={@id}
+      actor={@actor}
+      module={__MODULE__}
+      group_id={@group_id}
+      show_button={@show_button}
+    />
+    """
+  end
+
+  attr :id, :string, default: Ash.UUIDv7.generate()
+  attr :group_id, :string, default: nil
+  attr :show_button, :boolean, default: true
+  attr :actor, Helpcenter.Accounts.User, required: true
+
+  def render(assigns) do
+    ~H"""
+    <div id={"access-group-#{@group_id}"} class="mt-4">
+      <%!-- Form modal trigger Button --%>
+      <div class="flex justify-end">
+        <.button
+          :if={@show_button}
+          phx-click={show_modal("access-group-form-modal#{@group_id}")}
+          id={"access-group-modal-button#{@group_id}"}
+        >
+          <.icon name="hero-plus-solid" class="h-5 w-5" />
+        </.button>
+      </div>
+
+      <%!-- We want this form to show-up in a modal --%>
+      <.modal id={"access-group-form-modal#{@group_id}"}>
+        <.header class="mt-4">
+          <.icon name="hero-user-group" />
+          <%!-- New Group --%>
+          <span :if={is_nil(@group_id)}>{gettext("New Access Group")}</span>
+          <:subtitle :if={is_nil(@group_id)}>
+            {gettext("Fill below form to create a new user access group")}
+          </:subtitle>
+
+          <%!-- Existing group --%>
+          <span :if={@group_id}>{@form.source.data.name}</span>
+          <:subtitle :if={@group_id}>
+            {gettext("Fill below form to update %{name} access group details.",
+              name: @form.source.data.name
+            )}
+          </:subtitle>
+        </.header>
+        <.simple_form
+          for={@form}
+          phx-change="validate"
+          phx-submit="save"
+          id={"access-group-form#{@group_id}"}
+          phx-target={@myself}
+        >
+          <.input
+            field={@form[:name]}
+            id={"access-group-name#{@id}-#{@group_id}"}
+            label={gettext("Access Group Name")}
+          />
+          <.input
+            field={@form[:description]}
+            id={"access-group-description#{@id}-#{@group_id}"}
+            type="textarea"
+            label={gettext("Description")}
+          />
+          <:actions>
+            <.button class="w-full" phx-disable-with={gettext("Saving...")}>
+              {gettext("Submit")}
+            </.button>
+          </:actions>
+        </.simple_form>
+      </.modal>
+    </div>
+    """
+  end
+
+  def update(assigns, socket) do
+    socket
+    |> assign(assigns)
+    |> assign_form()
+    |> ok()
+  end
+
+  def handle_event("validate", %{"form" => attrs}, socket) do
+    socket
+    |> assign(:form, Form.validate(socket.assigns.form, attrs))
+    |> noreply()
+  end
+
+  def handle_event("save", %{"form" => attrs}, socket) do
+    case Form.submit(socket.assigns.form, params: attrs) do
+      {:ok, _group} ->
+        socket
+        |> put_component_flash(:info, gettext("Access Group Submitted."))
+        |> cancel_modal("access-group-form-modal#{socket.assigns.group_id}")
+        |> noreply()
+
+      {:error, form} ->
+        socket
+        |> assign(:form, form)
+        |> noreply()
+    end
+  end
+
+  # Prevents the form from being re-created on every update
+  defp assign_form(%{assigns: %{form: _form}} = socket), do: socket
+
+  defp assign_form(%{assigns: assigns} = socket) do
+    assign(socket, :form, get_form(assigns))
+  end
+
+  # Build for the new access group
+  defp get_form(%{group_id: nil} = assigns) do
+    Helpcenter.Accounts.Group
+    |> Form.for_create(:create, actor: assigns.actor)
+    |> to_form()
+  end
+
+  # Build for the existing access group
+  defp get_form(%{group_id: group_id} = assigns) do
+    Helpcenter.Accounts.Group
+    |> Ash.get!(group_id, actor: assigns.actor)
+    |> Form.for_update(:update, actor: assigns.actor)
+    |> to_form()
+  end
+end
diff --git a/lib/helpcenter_web/live/accounts/groups/group_permission_form.ex b/lib/helpcenter_web/live/accounts/groups/group_permission_form.ex
new file mode 100644
index 0000000..427a3ce
--- /dev/null
+++ b/lib/helpcenter_web/live/accounts/groups/group_permission_form.ex
@@ -0,0 +1,208 @@
+# lib/helpcenter_web/live/accounts/groups/group_permission_form.ex
+defmodule HelpcenterWeb.Accounts.Groups.GroupPermissionForm do
+  use HelpcenterWeb, :live_component
+
+  attr :group_id, :string, required: true
+  attr :actor, Helpcenter.Accounts.User, required: true
+
+  def form(assigns) do
+    ~H"""
+    <.live_component id={@group_id} actor={@actor} module={__MODULE__} group_id={@group_id} />
+    """
+  end
+
+  attr :group_id, :string, required: true
+  attr :actor, Helpcenter.Accounts.User, required: true
+
+  def render(assigns) do
+    ~H"""
+    <div id={"access-group-permissions-#{@group_id}"}>
+      <form id={"access-group-permission-form-#{@group_id}"} phx-submit="save" phx-target={@myself}>
+        <div class="flex justify-between items-center mb-6">
+          <label class="flex items-center gap-4 text-sm leading-6 text-zinc-600">
+            <input
+              type="checkbox"
+              id={"select-all-#{@group_id}"}
+              phx-hook="SelectAllPermissions"
+              data-group-id={@group_id}
+              class="rounded border-zinc-300 text-zinc-900 focus:ring-0"
+            />
+            <span class="font-medium">{gettext("Select All Permissions")}</span>
+          </label>
+          <div>
+            <.button>{gettext("Submit")}</.button>
+          </div>
+        </div>
+
+        <div class="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 xl:grid-cols-4 gap-6">
+          <div :for={{resource_name, perms} <- get_resource_permissions()}>
+            <div class="resource-group mb-6">
+              <h3 class="text-lg font-medium text-zinc-900 border-b pb-2 mb-3 flex items-center justify-between">
+                <label class="flex items-center gap-2 text-sm text-zinc-600">
+                  <input
+                    type="checkbox"
+                    id={"select-all-#{resource_name}-#{@group_id}"}
+                    phx-hook="SelectResourcePermissions"
+                    data-resource={resource_name}
+                    data-group-id={@group_id}
+                    class="rounded border-zinc-300 text-zinc-900 focus:ring-0"
+                  />
+                  {get_resource_name(resource_name)}
+                </label>
+              </h3>
+              <div class="mt-2 space-y-2 pl-4">
+                <div :for={perm <- perms}>
+                  <label class="flex items-center gap-4 text-sm leading-6 text-zinc-600">
+                    <input type="hidden" name={"form[#{perm.resource}][#{perm.action}]"} />
+                    <input
+                      type="checkbox"
+                      checked={group_has_permission?(perm.resource, perm.action, @group_permissions)}
+                      class="rounded border-zinc-300 text-zinc-900 focus:ring-0 permission-checkbox"
+                      id={"access-group-permission-#{perm.resource}-#{perm.action}"}
+                      name={"form[#{perm.resource}][#{perm.action}]"}
+                      data-resource={perm.resource}
+                    />
+                    {Phoenix.Naming.humanize(perm.action)}
+                  </label>
+                </div>
+              </div>
+            </div>
+          </div>
+        </div>
+        <.button>{gettext("Submit")}</.button>
+      </form>
+    </div>
+    """
+  end
+
+  def update(assigns, socket) do
+    socket
+    |> assign(assigns)
+    |> assign_group_permissions()
+    |> ok()
+  end
+
+  def handle_event("save", %{"form" => params}, socket) do
+    case save_group_permissions(params, socket) do
+      %Ash.BulkResult{status: :success} ->
+        socket
+        |> put_component_flash(:info, "Permissions updated successfully")
+        |> noreply()
+
+      error ->
+        dbg(error)
+
+        socket
+        |> put_flash(:error, "Unable to update permissions")
+        |> noreply()
+    end
+  end
+
+  defp assign_group_permissions(socket) do
+    assign(socket, :group_permissions, get_group_permissions(socket.assigns))
+  end
+
+  defp get_group_permissions(assigns) do
+    %{group_id: group_id, actor: actor} = assigns
+
+    Helpcenter.Accounts.Group
+    |> Ash.get!(group_id, actor: actor, load: :permissions)
+    |> Map.get(:permissions)
+  end
+
+  defp save_group_permissions(params, socket) do
+    %{actor: actor, group_id: group_id, group_permissions: perms} = socket.assigns
+
+    # Remove all existing permissions
+    Ash.bulk_destroy!(perms, :destroy, %{},
+      batch_size: 300,
+      domain: Helpcenter.Accounts,
+      tenant: actor.current_team
+    )
+
+    # Add new permissions
+    params
+    |> transform_permissions(group_id)
+    |> Ash.bulk_create!(
+      Helpcenter.Accounts.GroupPermission,
+      :create,
+      actor: actor,
+      tenant: actor.current_team,
+      return_errors?: true,
+      upsert_fields: [:group_id],
+      upsert_identity: :unique_group_permission
+    )
+  end
+
+  defp group_has_permission?(resource, action, group_permissions) do
+    group_permissions
+    |> Enum.any?(fn group_perm ->
+      group_perm.action == action |> to_string() &&
+        group_perm.resource == resource |> to_string()
+    end)
+  end
+
+  defp get_resource_permissions do
+    Helpcenter.permissions()
+    |> Enum.group_by(& &1.resource)
+    |> Enum.sort_by(fn {resource, _perms} -> resource end, :asc)
+  end
+
+  defp get_resource_name(resource_name) do
+    resource_name
+    |> Atom.to_string()
+    |> String.split(".")
+    |> Enum.at(-1)
+    |> Phoenix.Naming.humanize()
+  end
+
+  defp transform_permissions(params, group_id) do
+    params
+    |> convert_to_list()
+    |> transform_resources(group_id)
+    |> flatten_permissions()
+    |> filter_authorized()
+    |> remove_authorized_flag()
+  end
+
+  # Converts the params map to a list of key-value tuples
+  defp convert_to_list(params) do
+    Map.to_list(params)
+  end
+
+  # Transforms each resource and its permissions into structured maps
+  defp transform_resources(resource_list, group_id) do
+    Enum.map(resource_list, fn {resource, perms} ->
+      perms
+      |> Map.to_list()
+      |> transform_permissions_for_resource(resource, group_id)
+    end)
+  end
+
+  # Transforms individual permissions for a given resource
+  defp transform_permissions_for_resource(perms, resource, group_id) do
+    Enum.map(perms, fn {action, authorized?} ->
+      %{
+        group_id: group_id,
+        resource: resource,
+        action: action,
+        authorized?: authorized? == "on"
+      }
+    end)
+  end
+
+  # Flattens the nested list structure into a single list
+  defp flatten_permissions(nested_perms) do
+    Enum.flat_map(nested_perms, & &1)
+  end
+
+  # Keeps only the permissions that are authorized
+  defp filter_authorized(perms) do
+    Enum.filter(perms, & &1.authorized?)
+  end
+
+  # Removes the authorized? flag from each permission map
+  defp remove_authorized_flag(perms) do
+    Enum.map(perms, &Map.delete(&1, :authorized?))
+  end
+end
diff --git a/lib/helpcenter_web/live/accounts/groups/group_permissions_live.ex b/lib/helpcenter_web/live/accounts/groups/group_permissions_live.ex
new file mode 100644
index 0000000..5da4b65
--- /dev/null
+++ b/lib/helpcenter_web/live/accounts/groups/group_permissions_live.ex
@@ -0,0 +1,38 @@
+# lib/helpcenter_web/live/accounts/groups/edit_group_live.ex
+defmodule HelpcenterWeb.Accounts.Groups.GroupPermissionsLive do
+  use HelpcenterWeb, :live_view
+
+  def render(assigns) do
+    ~H"""
+    <.back navigate={~p"/accounts/groups"}>{gettext("Back to access groups")}</.back>
+    <.header class="mt-4">
+      <.icon name="hero-shield-check" /> {gettext("%{name} Access Permissions", name: @group.name)}
+      <:subtitle>{@group.description}</:subtitle>
+    </.header>
+
+    <%!-- Group permissions --%>
+    <div class="mt-4">
+      <HelpcenterWeb.Accounts.Groups.GroupPermissionForm.form
+        group_id={@group_id}
+        actor={@current_user}
+      />
+    </div>
+    """
+  end
+
+  def mount(%{"group_id" => group_id}, _session, socket) do
+    socket
+    |> assign(:group_id, group_id)
+    |> assign_group()
+    |> ok()
+  end
+
+  defp assign_group(socket) do
+    %{current_user: actor, group_id: group_id} = socket.assigns
+    assign(socket, :group, get_group(actor, group_id))
+  end
+
+  defp get_group(actor, group_id) do
+    Ash.get!(Helpcenter.Accounts.Group, group_id, actor: actor)
+  end
+end
diff --git a/lib/helpcenter_web/live/accounts/groups/groups_live.ex b/lib/helpcenter_web/live/accounts/groups/groups_live.ex
new file mode 100644
index 0000000..14def75
--- /dev/null
+++ b/lib/helpcenter_web/live/accounts/groups/groups_live.ex
@@ -0,0 +1,83 @@
+# lib/helpcenter_web/live/accounts/groups/groups_live.ex
+defmodule HelpcenterWeb.Accounts.Groups.GroupsLive do
+  use HelpcenterWeb, :live_view
+
+  def render(assigns) do
+    ~H"""
+    <div class="flex justify-between">
+      <.header class="mt-4">
+        <.icon name="hero-user-group-solid" /> {gettext("User Access Groups")}
+        <:subtitle>
+          {gettext("Create, update and manage user access groups and their permissions")}
+        </:subtitle>
+      </.header>
+      <%!-- Access Group Create form --%>
+      <HelpcenterWeb.Accounts.Groups.GroupForm.form actor={@current_user} id={Ash.UUIDv7.generate()} />
+    </div>
+    <%!-- Table groups --%>
+    <.table id="groups" rows={@groups}>
+      <:col :let={group} label={gettext("Name")}>{group.name}</:col>
+      <:col :let={group} label={gettext("Description")}>{group.description}</:col>
+      <:action :let={group}>
+        <div class="space-x-6">
+          <.link
+            id={"edit-access-group-#{group.id}"}
+            phx-click={show_modal("access-group-form-modal#{group.id}")}
+            class="font-semibold leading-6 text-zinc-900 hover:text-zinc-700 hover:underline"
+          >
+            <.icon name="hero-pencil-solid" class="h-4 w-4" />
+            {gettext("Edit")}
+          </.link>
+
+          <.link
+            id={"access-group-permissions-#{group.id}"}
+            navigate={~p"/accounts/groups/#{group.id}/permissions"}
+            class="font-semibold leading-6 text-zinc-900 hover:text-zinc-700 hover:underline"
+          >
+            <.icon name="hero-shield-check" class="h-4 w-4" />
+            {gettext("Permissions")}
+          </.link>
+        </div>
+      </:action>
+    </.table>
+
+    <%!-- Modals for group editing --%>
+    <HelpcenterWeb.Accounts.Groups.GroupForm.form
+      :for={group <- @groups}
+      actor={@current_user}
+      group_id={group.id}
+      show_button={false}
+      id={group.id}
+    />
+    """
+  end
+
+  def mount(_params, _sessions, socket) do
+    socket
+    |> maybe_subscribe()
+    |> assign_groups()
+    |> ok()
+  end
+
+  def handle_info(_message, socket) do
+    socket
+    |> assign_groups()
+    |> noreply()
+  end
+
+  # Subscribe connected users to the "groups" topic for real-time
+  # notifications when changes happen on access group
+  defp maybe_subscribe(socket) do
+    if connected?(socket), do: HelpcenterWeb.Endpoint.subscribe("groups")
+
+    socket
+  end
+
+  defp assign_groups(socket) do
+    assign(socket, :groups, get_groups(socket.assigns.current_user))
+  end
+
+  defp get_groups(actor) do
+    Ash.read!(Helpcenter.Accounts.Group, actor: actor)
+  end
+end
diff --git a/lib/helpcenter_web/live/categories_live.ex b/lib/helpcenter_web/live/categories_live.ex
index 57545cc..89d5e27 100644
--- a/lib/helpcenter_web/live/categories_live.ex
+++ b/lib/helpcenter_web/live/categories_live.ex
@@ -4,13 +4,23 @@ defmodule HelpcenterWeb.CategoriesLive do
   def render(assigns) do
     ~H"""
     <%!-- New Category Button --%>
-    <.button id="create-category-button" phx-click={JS.navigate(~p"/categories/create")}>
-      <.icon name="hero-plus-solid" />
-    </.button>
 
-    <%!-- List category records --%>
-    <h1>{gettext("Categories")}</h1>
+    <div class="flex justify-between items-end">
+      <.header class="mt-4">
+        <.icon name="hero-rectangle-group-solid" /> {gettext("Knowledge Base Categories")}
+        <:subtitle>
+          {gettext("Create, update and manage knowledge base categories")}
+        </:subtitle>
+      </.header>
+      <%!-- Access Group Create form --%>
 
+      <div class="">
+        <.button id="create-category-button" phx-click={JS.navigate(~p"/categories/create")}>
+          <.icon name="hero-plus-solid" class="h-5 w-5" />
+        </.button>
+      </div>
+    </div>
+    <%!-- List category records --%>
     <.table id="knowledge-base-categories" rows={@streams.categories}>
       <:col :let={{_id, row}} label={gettext("Name")}>{row.name}</:col>
       <:col :let={{_id, row}} label={gettext("Description")}>{row.description}</:col>
diff --git a/lib/helpcenter_web/router.ex b/lib/helpcenter_web/router.ex
index d85cebe..7be5a1b 100644
--- a/lib/helpcenter_web/router.ex
+++ b/lib/helpcenter_web/router.ex
@@ -42,6 +42,12 @@ defmodule HelpcenterWeb.Router do
         live "/create", CreateCategoryLive
         live "/:category_id", EditCategoryLive
       end
+
+      # lib/helpcenter_web/router.ex
+      scope "/accounts/groups", Accounts.Groups do
+        live "/", GroupsLive
+        live "/:group_id/permissions", GroupPermissionsLive
+      end
     end
   end
 
diff --git a/mix.lock b/mix.lock
index 63cac62..f451173 100644
--- a/mix.lock
+++ b/mix.lock
@@ -1,15 +1,15 @@
 %{
   "artificery": {:hex, :artificery, "0.4.3", "0bc4260f988dcb9dda4b23f9fc3c6c8b99a6220a331534fdf5bf2fd0d4333b02", [:mix], [], "hexpm", "12e95333a30e20884e937abdbefa3e7f5e05609c2ba8cf37b33f000b9ffc0504"},
-  "ash": {:hex, :ash, "3.4.64", "cbc337173fada2c094aa7f852fbb82d16f7090c06272aa34feb7479d1ff91162", [:mix], [{:decimal, "~> 2.0", [hex: :decimal, repo: "hexpm", optional: false]}, {:ecto, "~> 3.7", [hex: :ecto, repo: "hexpm", optional: false]}, {:ets, "~> 0.8", [hex: :ets, repo: "hexpm", optional: false]}, {:igniter, ">= 0.5.24 and < 1.0.0-0", [hex: :igniter, repo: "hexpm", optional: true]}, {:jason, ">= 1.0.0", [hex: :jason, repo: "hexpm", optional: false]}, {:owl, "~> 0.11", [hex: :owl, repo: "hexpm", optional: false]}, {:picosat_elixir, "~> 0.2", [hex: :picosat_elixir, repo: "hexpm", optional: true]}, {:plug, ">= 0.0.0", [hex: :plug, repo: "hexpm", optional: true]}, {:reactor, "~> 0.11", [hex: :reactor, repo: "hexpm", optional: false]}, {:simple_sat, ">= 0.1.1 and < 1.0.0-0", [hex: :simple_sat, repo: "hexpm", optional: true]}, {:spark, ">= 2.2.29 and < 3.0.0-0", [hex: :spark, repo: "hexpm", optional: false]}, {:splode, ">= 0.2.6 and < 1.0.0-0", [hex: :splode, repo: "hexpm", optional: false]}, {:stream_data, "~> 1.0", [hex: :stream_data, repo: "hexpm", optional: false]}, {:telemetry, "~> 1.1", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "f29472b64cec1c340a3f2f32ef3542b4d719a041a86678d0793442922f365709"},
-  "ash_authentication": {:hex, :ash_authentication, "4.5.1", "9f91df4ca82eb2a6382b0ea66e9ef0e7f6e4f0337a223cd7b7cb69911647b56e", [:mix], [{:ash, ">= 3.4.29 and < 4.0.0-0", [hex: :ash, repo: "hexpm", optional: false]}, {:ash_postgres, "~> 2.0", [hex: :ash_postgres, repo: "hexpm", optional: true]}, {:assent, "~> 0.2.13", [hex: :assent, repo: "hexpm", optional: false]}, {:bcrypt_elixir, "~> 3.0", [hex: :bcrypt_elixir, repo: "hexpm", optional: false]}, {:castore, "~> 1.0", [hex: :castore, repo: "hexpm", optional: false]}, {:finch, "~> 0.19", [hex: :finch, repo: "hexpm", optional: false]}, {:igniter, "~> 0.4", [hex: :igniter, repo: "hexpm", optional: true]}, {:jason, "~> 1.4", [hex: :jason, repo: "hexpm", optional: false]}, {:joken, "~> 2.5", [hex: :joken, repo: "hexpm", optional: false]}, {:plug, "~> 1.13", [hex: :plug, repo: "hexpm", optional: false]}, {:spark, "~> 2.0", [hex: :spark, repo: "hexpm", optional: false]}, {:splode, "~> 0.2", [hex: :splode, repo: "hexpm", optional: false]}], "hexpm", "306ec70d8d325a25f17cafadb9f535b9e7bb54c87fcddea4a44897afa50660d0"},
-  "ash_authentication_phoenix": {:hex, :ash_authentication_phoenix, "2.4.7", "4f887576034349ba794ee168a81a0d0c52b3b7bf29da00aea439bf91ed1dd1d7", [:mix], [{:ash, "~> 3.0", [hex: :ash, repo: "hexpm", optional: false]}, {:ash_authentication, "~> 4.1", [hex: :ash_authentication, repo: "hexpm", optional: false]}, {:ash_phoenix, "~> 2.0", [hex: :ash_phoenix, repo: "hexpm", optional: false]}, {:bcrypt_elixir, "~> 3.0", [hex: :bcrypt_elixir, repo: "hexpm", optional: false]}, {:gettext, "~> 0.26", [hex: :gettext, repo: "hexpm", optional: true]}, {:igniter, ">= 0.5.1 and < 1.0.0-0", [hex: :igniter, repo: "hexpm", optional: true]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: false]}, {:phoenix, "~> 1.6", [hex: :phoenix, repo: "hexpm", optional: false]}, {:phoenix_html, "~> 4.0", [hex: :phoenix_html, repo: "hexpm", optional: false]}, {:phoenix_html_helpers, "~> 1.0", [hex: :phoenix_html_helpers, repo: "hexpm", optional: false]}, {:phoenix_live_view, "~> 1.0", [hex: :phoenix_live_view, repo: "hexpm", optional: false]}, {:phoenix_view, "~> 2.0", [hex: :phoenix_view, repo: "hexpm", optional: false]}, {:slugify, "~> 1.3", [hex: :slugify, repo: "hexpm", optional: false]}], "hexpm", "156b2de2e7021157e56dc9d25bd12e9fa8799c1fdc2139fc81ce4ea67055e84f"},
-  "ash_phoenix": {:hex, :ash_phoenix, "2.1.18", "2f4adfd3f3b7ab37f54a7a63b236d1eec965af6a26457a2c8aed92bf9e31a69a", [:mix], [{:ash, ">= 3.4.31 and < 4.0.0-0", [hex: :ash, repo: "hexpm", optional: false]}, {:igniter, ">= 0.4.3 and < 1.0.0-0", [hex: :igniter, repo: "hexpm", optional: true]}, {:phoenix, "~> 1.5.6 or ~> 1.6", [hex: :phoenix, repo: "hexpm", optional: false]}, {:phoenix_html, "~> 4.0", [hex: :phoenix_html, repo: "hexpm", optional: false]}, {:phoenix_live_view, "~> 0.20.3 or ~> 1.0-rc.1", [hex: :phoenix_live_view, repo: "hexpm", optional: false]}, {:spark, ">= 2.2.29 and < 3.0.0-0", [hex: :spark, repo: "hexpm", optional: false]}], "hexpm", "c82f319e86c930fefcc8f9519a785b54d9a5d35d662e6ba12c293b5e95041bcd"},
-  "ash_postgres": {:hex, :ash_postgres, "2.5.5", "2975515c1d4b60b9024e9ea8deca062c8fd170ce9a146e0057850cfd1bcd4c4c", [:mix], [{:ash, ">= 3.4.64 and < 4.0.0-0", [hex: :ash, repo: "hexpm", optional: false]}, {:ash_sql, ">= 0.2.43 and < 1.0.0-0", [hex: :ash_sql, repo: "hexpm", optional: false]}, {:ecto, ">= 3.12.1 and < 4.0.0-0", [hex: :ecto, repo: "hexpm", optional: false]}, {:ecto_sql, "~> 3.12", [hex: :ecto_sql, repo: "hexpm", optional: false]}, {:igniter, ">= 0.5.16 and < 1.0.0-0", [hex: :igniter, repo: "hexpm", optional: true]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: false]}, {:postgrex, ">= 0.0.0", [hex: :postgrex, repo: "hexpm", optional: false]}], "hexpm", "3fdc68700d01c9caea15391647c8ebcb26fcd5d6fbadcb68929420cc783b49a5"},
-  "ash_sql": {:hex, :ash_sql, "0.2.57", "51a574fed322e0e6fd743362cbea264275fd5799278288a3a41aa9a2e457d56d", [:mix], [{:ash, ">= 3.4.60 and < 4.0.0-0", [hex: :ash, repo: "hexpm", optional: false]}, {:ecto, "~> 3.9", [hex: :ecto, repo: "hexpm", optional: false]}, {:ecto_sql, "~> 3.9", [hex: :ecto_sql, repo: "hexpm", optional: false]}], "hexpm", "0b906cef68aceb2c9666a52d4e0350c271de55483d846bed2312c59f51af2f3a"},
+  "ash": {:hex, :ash, "3.4.71", "ce8fa3c38bb59d067647bdc87aa9198335fdeeab36660c869b72c47339fc9d69", [:mix], [{:decimal, "~> 2.0", [hex: :decimal, repo: "hexpm", optional: false]}, {:ecto, "~> 3.7", [hex: :ecto, repo: "hexpm", optional: false]}, {:ets, "~> 0.8", [hex: :ets, repo: "hexpm", optional: false]}, {:igniter, ">= 0.5.24 and < 1.0.0-0", [hex: :igniter, repo: "hexpm", optional: true]}, {:jason, ">= 1.0.0", [hex: :jason, repo: "hexpm", optional: false]}, {:owl, "~> 0.11", [hex: :owl, repo: "hexpm", optional: false]}, {:picosat_elixir, "~> 0.2", [hex: :picosat_elixir, repo: "hexpm", optional: true]}, {:plug, ">= 0.0.0", [hex: :plug, repo: "hexpm", optional: true]}, {:reactor, "~> 0.11", [hex: :reactor, repo: "hexpm", optional: false]}, {:simple_sat, ">= 0.1.1 and < 1.0.0-0", [hex: :simple_sat, repo: "hexpm", optional: true]}, {:spark, ">= 2.2.29 and < 3.0.0-0", [hex: :spark, repo: "hexpm", optional: false]}, {:splode, ">= 0.2.6 and < 1.0.0-0", [hex: :splode, repo: "hexpm", optional: false]}, {:stream_data, "~> 1.0", [hex: :stream_data, repo: "hexpm", optional: false]}, {:telemetry, "~> 1.1", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "f255da731b5b3ec4d916b5282faecbbbe9beb64a3641b4a45ac91160ffea3cc9"},
+  "ash_authentication": {:hex, :ash_authentication, "4.6.0", "f466524b89166b76ec9847dc89283085119420d20bccaca6b52724081cb63911", [:mix], [{:ash, ">= 3.4.29 and < 4.0.0-0", [hex: :ash, repo: "hexpm", optional: false]}, {:ash_postgres, "~> 2.0", [hex: :ash_postgres, repo: "hexpm", optional: true]}, {:assent, "~> 0.2.13", [hex: :assent, repo: "hexpm", optional: false]}, {:bcrypt_elixir, "~> 3.0", [hex: :bcrypt_elixir, repo: "hexpm", optional: false]}, {:castore, "~> 1.0", [hex: :castore, repo: "hexpm", optional: false]}, {:finch, "~> 0.19", [hex: :finch, repo: "hexpm", optional: false]}, {:igniter, "~> 0.4", [hex: :igniter, repo: "hexpm", optional: true]}, {:jason, "~> 1.4", [hex: :jason, repo: "hexpm", optional: false]}, {:joken, "~> 2.5", [hex: :joken, repo: "hexpm", optional: false]}, {:plug, "~> 1.13", [hex: :plug, repo: "hexpm", optional: false]}, {:spark, "~> 2.0", [hex: :spark, repo: "hexpm", optional: false]}, {:splode, "~> 0.2", [hex: :splode, repo: "hexpm", optional: false]}], "hexpm", "6c369d50fc8c702403ceedc329552ac631e3a83e5e0677b4901d1b77bbdbdb30"},
+  "ash_authentication_phoenix": {:hex, :ash_authentication_phoenix, "2.5.1", "aa11c8d58f26cd85e1de331d7e4423af2cbdfa9c35f1b5ec2c115a6badeb30d6", [:mix], [{:ash, "~> 3.0", [hex: :ash, repo: "hexpm", optional: false]}, {:ash_authentication, "~> 4.1", [hex: :ash_authentication, repo: "hexpm", optional: false]}, {:ash_phoenix, "~> 2.0", [hex: :ash_phoenix, repo: "hexpm", optional: false]}, {:bcrypt_elixir, "~> 3.0", [hex: :bcrypt_elixir, repo: "hexpm", optional: false]}, {:gettext, "~> 0.26", [hex: :gettext, repo: "hexpm", optional: true]}, {:igniter, ">= 0.5.25 and < 1.0.0-0", [hex: :igniter, repo: "hexpm", optional: true]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: false]}, {:phoenix, "~> 1.6", [hex: :phoenix, repo: "hexpm", optional: false]}, {:phoenix_html, "~> 4.0", [hex: :phoenix_html, repo: "hexpm", optional: false]}, {:phoenix_html_helpers, "~> 1.0", [hex: :phoenix_html_helpers, repo: "hexpm", optional: false]}, {:phoenix_live_view, "~> 1.0", [hex: :phoenix_live_view, repo: "hexpm", optional: false]}, {:phoenix_view, "~> 2.0", [hex: :phoenix_view, repo: "hexpm", optional: false]}, {:slugify, "~> 1.3", [hex: :slugify, repo: "hexpm", optional: false]}], "hexpm", "45980793197482cbcb3b76a5e60c87901ebc35f55bcc5c3399ec4cb44c605c88"},
+  "ash_phoenix": {:hex, :ash_phoenix, "2.1.23", "75c5500142d44c07431fcf7473784e6eed8d32777b68616de30b2ee7c3909110", [:mix], [{:ash, ">= 3.4.31 and < 4.0.0-0", [hex: :ash, repo: "hexpm", optional: false]}, {:igniter, ">= 0.4.3 and < 1.0.0-0", [hex: :igniter, repo: "hexpm", optional: true]}, {:phoenix, "~> 1.5.6 or ~> 1.6", [hex: :phoenix, repo: "hexpm", optional: false]}, {:phoenix_html, "~> 4.0", [hex: :phoenix_html, repo: "hexpm", optional: false]}, {:phoenix_live_view, "~> 0.20.3 or ~> 1.0-rc.1", [hex: :phoenix_live_view, repo: "hexpm", optional: false]}, {:spark, ">= 2.2.29 and < 3.0.0-0", [hex: :spark, repo: "hexpm", optional: false]}], "hexpm", "2d640dbd57020102d1a8997ab4b42035418696ebacfa5f8cbb94466e67deb8cf"},
+  "ash_postgres": {:hex, :ash_postgres, "2.5.12", "cca37fb0a72114ea899f9a80cf7385b1826872263c75a7735f01898f4ff68a23", [:mix], [{:ash, ">= 3.4.69 and < 4.0.0-0", [hex: :ash, repo: "hexpm", optional: false]}, {:ash_sql, ">= 0.2.62 and < 1.0.0-0", [hex: :ash_sql, repo: "hexpm", optional: false]}, {:ecto, ">= 3.12.1 and < 4.0.0-0", [hex: :ecto, repo: "hexpm", optional: false]}, {:ecto_sql, "~> 3.12", [hex: :ecto_sql, repo: "hexpm", optional: false]}, {:igniter, ">= 0.5.16 and < 1.0.0-0", [hex: :igniter, repo: "hexpm", optional: true]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: false]}, {:postgrex, ">= 0.0.0", [hex: :postgrex, repo: "hexpm", optional: false]}], "hexpm", "b69a116b3d5b57fe868da914e1ed15286c46a0865b45f14950a38a6af06a915f"},
+  "ash_sql": {:hex, :ash_sql, "0.2.62", "fcf1dde5a453cb024799bd43ab25aee3a7cc4ce7a48f1456310a65aec9e7ea7a", [:mix], [{:ash, ">= 3.4.65 and < 4.0.0-0", [hex: :ash, repo: "hexpm", optional: false]}, {:ecto, "~> 3.9", [hex: :ecto, repo: "hexpm", optional: false]}, {:ecto_sql, "~> 3.9", [hex: :ecto_sql, repo: "hexpm", optional: false]}], "hexpm", "df8c72b9b1c7b2c3147334eb63e819bc8d15288e1c6f0ddcd7691530db272ce0"},
   "assent": {:hex, :assent, "0.2.13", "11226365d2d8661d23e9a2cf94d3255e81054ff9d88ac877f28bfdf38fa4ef31", [:mix], [{:certifi, ">= 0.0.0", [hex: :certifi, repo: "hexpm", optional: true]}, {:finch, "~> 0.15", [hex: :finch, repo: "hexpm", optional: true]}, {:jose, "~> 1.8", [hex: :jose, repo: "hexpm", optional: true]}, {:mint, "~> 1.0", [hex: :mint, repo: "hexpm", optional: true]}, {:req, "~> 0.4", [hex: :req, repo: "hexpm", optional: true]}, {:ssl_verify_fun, ">= 0.0.0", [hex: :ssl_verify_fun, repo: "hexpm", optional: true]}], "hexpm", "bf9f351b01dd6bceea1d1f157f05438f6765ce606e6eb8d29296003d29bf6eab"},
-  "bandit": {:hex, :bandit, "1.6.7", "42f30e37a1c89a2a12943c5dca76f731a2313e8a2e21c1a95dc8241893e922d1", [:mix], [{:hpax, "~> 1.0", [hex: :hpax, repo: "hexpm", optional: false]}, {:plug, "~> 1.14", [hex: :plug, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}, {:thousand_island, "~> 1.0", [hex: :thousand_island, repo: "hexpm", optional: false]}, {:websock, "~> 0.5", [hex: :websock, repo: "hexpm", optional: false]}], "hexpm", "551ba8ff5e4fc908cbeb8c9f0697775fb6813a96d9de5f7fe02e34e76fd7d184"},
+  "bandit": {:hex, :bandit, "1.6.9", "cf4653d0490941629a4475381eda3b8d4d2653471a9efe0147b2195bef40ece5", [:mix], [{:hpax, "~> 1.0", [hex: :hpax, repo: "hexpm", optional: false]}, {:plug, "~> 1.14", [hex: :plug, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}, {:thousand_island, "~> 1.0", [hex: :thousand_island, repo: "hexpm", optional: false]}, {:websock, "~> 0.5", [hex: :websock, repo: "hexpm", optional: false]}], "hexpm", "67ab91338f308da9fb10d5afde35899e15af653adf31d682dd3a0e7c1d34db23"},
   "bcrypt_elixir": {:hex, :bcrypt_elixir, "3.2.1", "e361261a0401d82dadc1ab7b969f91d250bf7577283e933fe8c5b72f8f5b3c46", [:make, :mix], [{:comeonin, "~> 5.3", [hex: :comeonin, repo: "hexpm", optional: false]}, {:elixir_make, "~> 0.6", [hex: :elixir_make, repo: "hexpm", optional: false]}], "hexpm", "81170177d5c2e280d12141a0b9d9e299bf731535e2d959982bdcd4cfe3c82865"},
-  "castore": {:hex, :castore, "1.0.11", "4bbd584741601eb658007339ea730b082cc61f3554cf2e8f39bf693a11b49073", [:mix], [], "hexpm", "e03990b4db988df56262852f20de0f659871c35154691427a5047f4967a16a62"},
+  "castore": {:hex, :castore, "1.0.12", "053f0e32700cbec356280c0e835df425a3be4bc1e0627b714330ad9d0f05497f", [:mix], [], "hexpm", "3dca286b2186055ba0c9449b4e95b97bf1b57b47c1f2644555879e659960c224"},
   "comeonin": {:hex, :comeonin, "5.5.1", "5113e5f3800799787de08a6e0db307133850e635d34e9fab23c70b6501669510", [:mix], [], "hexpm", "65aac8f19938145377cee73973f192c5645873dcf550a8a6b18187d17c13ccdb"},
   "db_connection": {:hex, :db_connection, "2.7.0", "b99faa9291bb09892c7da373bb82cba59aefa9b36300f6145c5f201c7adf48ec", [:mix], [{:telemetry, "~> 0.4 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "dcf08f31b2701f857dfc787fbad78223d61a32204f217f15e881dd93e4bdd3ff"},
   "decimal": {:hex, :decimal, "2.3.0", "3ad6255aa77b4a3c4f818171b12d237500e63525c2fd056699967a3e7ea20f62", [:mix], [], "hexpm", "a4d66355cb29cb47c3cf30e71329e58361cfcb37c34235ef3bf1d7bf3773aeac"},
@@ -24,12 +24,12 @@
   "expo": {:hex, :expo, "1.1.0", "f7b9ed7fb5745ebe1eeedf3d6f29226c5dd52897ac67c0f8af62a07e661e5c75", [:mix], [], "hexpm", "fbadf93f4700fb44c331362177bdca9eeb8097e8b0ef525c9cc501cb9917c960"},
   "file_system": {:hex, :file_system, "1.1.0", "08d232062284546c6c34426997dd7ef6ec9f8bbd090eb91780283c9016840e8f", [:mix], [], "hexpm", "bfcf81244f416871f2a2e15c1b515287faa5db9c6bcf290222206d120b3d43f6"},
   "finch": {:hex, :finch, "0.19.0", "c644641491ea854fc5c1bbaef36bfc764e3f08e7185e1f084e35e0672241b76d", [:mix], [{:mime, "~> 1.0 or ~> 2.0", [hex: :mime, repo: "hexpm", optional: false]}, {:mint, "~> 1.6.2 or ~> 1.7", [hex: :mint, repo: "hexpm", optional: false]}, {:nimble_options, "~> 0.4 or ~> 1.0", [hex: :nimble_options, repo: "hexpm", optional: false]}, {:nimble_pool, "~> 1.1", [hex: :nimble_pool, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "fc5324ce209125d1e2fa0fcd2634601c52a787aff1cd33ee833664a5af4ea2b6"},
-  "floki": {:hex, :floki, "0.37.0", "b83e0280bbc6372f2a403b2848013650b16640cd2470aea6701f0632223d719e", [:mix], [], "hexpm", "516a0c15a69f78c47dc8e0b9b3724b29608aa6619379f91b1ffa47109b5d0dd3"},
+  "floki": {:hex, :floki, "0.37.1", "d7aaee758c8a5b4a7495799a4260754fec5530d95b9c383c03b27359dea117cf", [:mix], [], "hexpm", "673d040cb594d31318d514590246b6dd587ed341d3b67e17c1c0eb8ce7ca6f04"},
   "gettext": {:hex, :gettext, "0.26.2", "5978aa7b21fada6deabf1f6341ddba50bc69c999e812211903b169799208f2a8", [:mix], [{:expo, "~> 0.5.1 or ~> 1.0", [hex: :expo, repo: "hexpm", optional: false]}], "hexpm", "aa978504bcf76511efdc22d580ba08e2279caab1066b76bb9aa81c4a1e0a32a5"},
   "glob_ex": {:hex, :glob_ex, "0.1.11", "cb50d3f1ef53f6ca04d6252c7fde09fd7a1cf63387714fe96f340a1349e62c93", [:mix], [], "hexpm", "342729363056e3145e61766b416769984c329e4378f1d558b63e341020525de4"},
   "heroicons": {:git, "https://github.com/tailwindlabs/heroicons.git", "88ab3a0d790e6a47404cba02800a6b25d2afae50", [tag: "v2.1.1", sparse: "optimized", depth: 1]},
   "hpax": {:hex, :hpax, "1.0.2", "762df951b0c399ff67cc57c3995ec3cf46d696e41f0bba17da0518d94acd4aac", [:mix], [], "hexpm", "2f09b4c1074e0abd846747329eaa26d535be0eb3d189fa69d812bfb8bfefd32f"},
-  "igniter": {:hex, :igniter, "0.5.25", "a9e26794efe4b5619edd112b2ce8ffa3931f1e4d558dfebcd344553024e359b5", [:mix], [{:glob_ex, "~> 0.1.7", [hex: :glob_ex, repo: "hexpm", optional: false]}, {:inflex, "~> 2.0", [hex: :inflex, repo: "hexpm", optional: false]}, {:jason, "~> 1.4", [hex: :jason, repo: "hexpm", optional: false]}, {:owl, "~> 0.11", [hex: :owl, repo: "hexpm", optional: false]}, {:phx_new, "~> 1.7", [hex: :phx_new, repo: "hexpm", optional: true]}, {:req, "~> 0.5", [hex: :req, repo: "hexpm", optional: false]}, {:rewrite, ">= 1.1.1 and < 2.0.0-0", [hex: :rewrite, repo: "hexpm", optional: false]}, {:sourceror, "~> 1.4", [hex: :sourceror, repo: "hexpm", optional: false]}, {:spitfire, ">= 0.1.3 and < 1.0.0-0", [hex: :spitfire, repo: "hexpm", optional: false]}], "hexpm", "d944d3ed8439bb2d98391f39b86305d109f4123c947061db54c1c0f9ecad890e"},
+  "igniter": {:hex, :igniter, "0.5.38", "436a6414abc9245e539d6c92a6f4854f62270fbf6547c4acf1e5a65c0e4f4d4b", [:mix], [{:glob_ex, "~> 0.1.7", [hex: :glob_ex, repo: "hexpm", optional: false]}, {:inflex, "~> 2.0", [hex: :inflex, repo: "hexpm", optional: false]}, {:jason, "~> 1.4", [hex: :jason, repo: "hexpm", optional: false]}, {:owl, "~> 0.11", [hex: :owl, repo: "hexpm", optional: false]}, {:phx_new, "~> 1.7", [hex: :phx_new, repo: "hexpm", optional: true]}, {:req, "~> 0.5", [hex: :req, repo: "hexpm", optional: false]}, {:rewrite, ">= 1.1.1 and < 2.0.0-0", [hex: :rewrite, repo: "hexpm", optional: false]}, {:sourceror, "~> 1.4", [hex: :sourceror, repo: "hexpm", optional: false]}, {:spitfire, ">= 0.1.3 and < 1.0.0-0", [hex: :spitfire, repo: "hexpm", optional: false]}], "hexpm", "e5f1474a2a7ad186f3b71074d9d1ef25d306634e12af4ea01beae06ba958491d"},
   "inflex": {:hex, :inflex, "2.1.0", "a365cf0821a9dacb65067abd95008ca1b0bb7dcdd85ae59965deef2aa062924c", [:mix], [], "hexpm", "14c17d05db4ee9b6d319b0bff1bdf22aa389a25398d1952c7a0b5f3d93162dd8"},
   "iterex": {:hex, :iterex, "0.1.2", "58f9b9b9a22a55cbfc7b5234a9c9c63eaac26d276b3db80936c0e1c60355a5a6", [:mix], [], "hexpm", "2e103b8bcc81757a9af121f6dc0df312c9a17220f302b1193ef720460d03029d"},
   "jason": {:hex, :jason, "1.4.4", "b9226785a9aa77b6857ca22832cffa5d5011a667207eb2a0ad56adb5db443b8a", [:mix], [{:decimal, "~> 1.0 or ~> 2.0", [hex: :decimal, repo: "hexpm", optional: true]}], "hexpm", "c5eb0cab91f094599f94d55bc63409236a8ec69a21a67814529e8d5f6cc90b3b"},
@@ -42,36 +42,39 @@
   "nimble_options": {:hex, :nimble_options, "1.1.1", "e3a492d54d85fc3fd7c5baf411d9d2852922f66e69476317787a7b2bb000a61b", [:mix], [], "hexpm", "821b2470ca9442c4b6984882fe9bb0389371b8ddec4d45a9504f00a66f650b44"},
   "nimble_pool": {:hex, :nimble_pool, "1.1.0", "bf9c29fbdcba3564a8b800d1eeb5a3c58f36e1e11d7b7fb2e084a643f645f06b", [:mix], [], "hexpm", "af2e4e6b34197db81f7aad230c1118eac993acc0dae6bc83bac0126d4ae0813a"},
   "owl": {:hex, :owl, "0.12.2", "65906b525e5c3ef51bab6cba7687152be017aebe1da077bb719a5ee9f7e60762", [:mix], [{:ucwidth, "~> 0.2", [hex: :ucwidth, repo: "hexpm", optional: true]}], "hexpm", "6398efa9e1fea70a04d24231e10dcd66c1ac1aa2da418d20ef5357ec61de2880"},
-  "phoenix": {:hex, :phoenix, "1.7.19", "36617efe5afbd821099a8b994ff4618a340a5bfb25531a1802c4d4c634017a57", [:mix], [{:castore, ">= 0.0.0", [hex: :castore, repo: "hexpm", optional: false]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: true]}, {:phoenix_pubsub, "~> 2.1", [hex: :phoenix_pubsub, repo: "hexpm", optional: false]}, {:phoenix_template, "~> 1.0", [hex: :phoenix_template, repo: "hexpm", optional: false]}, {:phoenix_view, "~> 2.0", [hex: :phoenix_view, repo: "hexpm", optional: true]}, {:plug, "~> 1.14", [hex: :plug, repo: "hexpm", optional: false]}, {:plug_cowboy, "~> 2.7", [hex: :plug_cowboy, repo: "hexpm", optional: true]}, {:plug_crypto, "~> 1.2 or ~> 2.0", [hex: :plug_crypto, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}, {:websock_adapter, "~> 0.5.3", [hex: :websock_adapter, repo: "hexpm", optional: false]}], "hexpm", "ba4dc14458278773f905f8ae6c2ec743d52c3a35b6b353733f64f02dfe096cd6"},
+  "phoenix": {:hex, :phoenix, "1.7.20", "6bababaf27d59f5628f9b608de902a021be2cecefb8231e1dbdc0a2e2e480e9b", [:mix], [{:castore, ">= 0.0.0", [hex: :castore, repo: "hexpm", optional: false]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: true]}, {:phoenix_pubsub, "~> 2.1", [hex: :phoenix_pubsub, repo: "hexpm", optional: false]}, {:phoenix_template, "~> 1.0", [hex: :phoenix_template, repo: "hexpm", optional: false]}, {:phoenix_view, "~> 2.0", [hex: :phoenix_view, repo: "hexpm", optional: true]}, {:plug, "~> 1.14", [hex: :plug, repo: "hexpm", optional: false]}, {:plug_cowboy, "~> 2.7", [hex: :plug_cowboy, repo: "hexpm", optional: true]}, {:plug_crypto, "~> 1.2 or ~> 2.0", [hex: :plug_crypto, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}, {:websock_adapter, "~> 0.5.3", [hex: :websock_adapter, repo: "hexpm", optional: false]}], "hexpm", "6be2ab98302e8784a31829e0d50d8bdfa81a23cd912c395bafd8b8bfb5a086c2"},
   "phoenix_ecto": {:hex, :phoenix_ecto, "4.6.3", "f686701b0499a07f2e3b122d84d52ff8a31f5def386e03706c916f6feddf69ef", [:mix], [{:ecto, "~> 3.5", [hex: :ecto, repo: "hexpm", optional: false]}, {:phoenix_html, "~> 2.14.2 or ~> 3.0 or ~> 4.1", [hex: :phoenix_html, repo: "hexpm", optional: true]}, {:plug, "~> 1.9", [hex: :plug, repo: "hexpm", optional: false]}, {:postgrex, "~> 0.16 or ~> 1.0", [hex: :postgrex, repo: "hexpm", optional: true]}], "hexpm", "909502956916a657a197f94cc1206d9a65247538de8a5e186f7537c895d95764"},
-  "phoenix_html": {:hex, :phoenix_html, "4.2.0", "83a4d351b66f472ebcce242e4ae48af1b781866f00ef0eb34c15030d4e2069ac", [:mix], [], "hexpm", "9713b3f238d07043583a94296cc4bbdceacd3b3a6c74667f4df13971e7866ec8"},
+  "phoenix_html": {:hex, :phoenix_html, "4.2.1", "35279e2a39140068fc03f8874408d58eef734e488fc142153f055c5454fd1c08", [:mix], [], "hexpm", "cff108100ae2715dd959ae8f2a8cef8e20b593f8dfd031c9cba92702cf23e053"},
   "phoenix_html_helpers": {:hex, :phoenix_html_helpers, "1.0.1", "7eed85c52eff80a179391036931791ee5d2f713d76a81d0d2c6ebafe1e11e5ec", [:mix], [{:phoenix_html, "~> 4.0", [hex: :phoenix_html, repo: "hexpm", optional: false]}, {:plug, "~> 1.5", [hex: :plug, repo: "hexpm", optional: true]}], "hexpm", "cffd2385d1fa4f78b04432df69ab8da63dc5cf63e07b713a4dcf36a3740e3090"},
   "phoenix_live_dashboard": {:hex, :phoenix_live_dashboard, "0.8.6", "7b1f0327f54c9eb69845fd09a77accf922f488c549a7e7b8618775eb603a62c7", [:mix], [{:ecto, "~> 3.6.2 or ~> 3.7", [hex: :ecto, repo: "hexpm", optional: true]}, {:ecto_mysql_extras, "~> 0.5", [hex: :ecto_mysql_extras, repo: "hexpm", optional: true]}, {:ecto_psql_extras, "~> 0.7", [hex: :ecto_psql_extras, repo: "hexpm", optional: true]}, {:ecto_sqlite3_extras, "~> 1.1.7 or ~> 1.2.0", [hex: :ecto_sqlite3_extras, repo: "hexpm", optional: true]}, {:mime, "~> 1.6 or ~> 2.0", [hex: :mime, repo: "hexpm", optional: false]}, {:phoenix_live_view, "~> 0.19 or ~> 1.0", [hex: :phoenix_live_view, repo: "hexpm", optional: false]}, {:telemetry_metrics, "~> 0.6 or ~> 1.0", [hex: :telemetry_metrics, repo: "hexpm", optional: false]}], "hexpm", "1681ab813ec26ca6915beb3414aa138f298e17721dc6a2bde9e6eb8a62360ff6"},
   "phoenix_live_reload": {:hex, :phoenix_live_reload, "1.5.3", "f2161c207fda0e4fb55165f650f7f8db23f02b29e3bff00ff7ef161d6ac1f09d", [:mix], [{:file_system, "~> 0.3 or ~> 1.0", [hex: :file_system, repo: "hexpm", optional: false]}, {:phoenix, "~> 1.4", [hex: :phoenix, repo: "hexpm", optional: false]}], "hexpm", "b4ec9cd73cb01ff1bd1cac92e045d13e7030330b74164297d1aee3907b54803c"},
-  "phoenix_live_view": {:hex, :phoenix_live_view, "1.0.4", "327491b033e79db2f887b065c5a2993228449091883d74cfa1baa12f8c98d5eb", [:mix], [{:floki, "~> 0.36", [hex: :floki, repo: "hexpm", optional: true]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: true]}, {:phoenix, "~> 1.6.15 or ~> 1.7.0", [hex: :phoenix, repo: "hexpm", optional: false]}, {:phoenix_html, "~> 3.3 or ~> 4.0", [hex: :phoenix_html, repo: "hexpm", optional: false]}, {:phoenix_template, "~> 1.0", [hex: :phoenix_template, repo: "hexpm", optional: false]}, {:phoenix_view, "~> 2.0", [hex: :phoenix_view, repo: "hexpm", optional: true]}, {:plug, "~> 1.15", [hex: :plug, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4.2 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "a9865316ddf8d78f382d63af278d20436b52d262b60239956817a61279514366"},
+  "phoenix_live_view": {:hex, :phoenix_live_view, "1.0.7", "491c5fcccb9cee4978a25f0ec4c4b01975cd5f8d6d2366ca1bd5bf6f7f81a862", [:mix], [{:floki, "~> 0.36", [hex: :floki, repo: "hexpm", optional: true]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: true]}, {:phoenix, "~> 1.6.15 or ~> 1.7.0", [hex: :phoenix, repo: "hexpm", optional: false]}, {:phoenix_html, "~> 3.3 or ~> 4.0", [hex: :phoenix_html, repo: "hexpm", optional: false]}, {:phoenix_template, "~> 1.0", [hex: :phoenix_template, repo: "hexpm", optional: false]}, {:phoenix_view, "~> 2.0", [hex: :phoenix_view, repo: "hexpm", optional: true]}, {:plug, "~> 1.15", [hex: :plug, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4.2 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "a1758c5816f65c83af38dfeef35a6d491363e32c707c2e3bb6b8f6339e8f2cbf"},
   "phoenix_pubsub": {:hex, :phoenix_pubsub, "2.1.3", "3168d78ba41835aecad272d5e8cd51aa87a7ac9eb836eabc42f6e57538e3731d", [:mix], [], "hexpm", "bba06bc1dcfd8cb086759f0edc94a8ba2bc8896d5331a1e2c2902bf8e36ee502"},
   "phoenix_template": {:hex, :phoenix_template, "1.0.4", "e2092c132f3b5e5b2d49c96695342eb36d0ed514c5b252a77048d5969330d639", [:mix], [{:phoenix_html, "~> 2.14.2 or ~> 3.0 or ~> 4.0", [hex: :phoenix_html, repo: "hexpm", optional: true]}], "hexpm", "2c0c81f0e5c6753faf5cca2f229c9709919aba34fab866d3bc05060c9c444206"},
   "phoenix_view": {:hex, :phoenix_view, "2.0.4", "b45c9d9cf15b3a1af5fb555c674b525391b6a1fe975f040fb4d913397b31abf4", [:mix], [{:phoenix_html, "~> 2.14.2 or ~> 3.0 or ~> 4.0", [hex: :phoenix_html, repo: "hexpm", optional: true]}, {:phoenix_template, "~> 1.0", [hex: :phoenix_template, repo: "hexpm", optional: false]}], "hexpm", "4e992022ce14f31fe57335db27a28154afcc94e9983266835bb3040243eb620b"},
   "picosat_elixir": {:hex, :picosat_elixir, "0.2.3", "bf326d0f179fbb3b706bb2c15fbc367dacfa2517157d090fdfc32edae004c597", [:make, :mix], [{:elixir_make, "~> 0.6", [hex: :elixir_make, repo: "hexpm", optional: false]}], "hexpm", "f76c9db2dec9d2561ffaa9be35f65403d53e984e8cd99c832383b7ab78c16c66"},
-  "plug": {:hex, :plug, "1.16.1", "40c74619c12f82736d2214557dedec2e9762029b2438d6d175c5074c933edc9d", [:mix], [{:mime, "~> 1.0 or ~> 2.0", [hex: :mime, repo: "hexpm", optional: false]}, {:plug_crypto, "~> 1.1.1 or ~> 1.2 or ~> 2.0", [hex: :plug_crypto, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4.3 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "a13ff6b9006b03d7e33874945b2755253841b238c34071ed85b0e86057f8cddc"},
+  "plug": {:hex, :plug, "1.17.0", "a0832e7af4ae0f4819e0c08dd2e7482364937aea6a8a997a679f2cbb7e026b2e", [:mix], [{:mime, "~> 1.0 or ~> 2.0", [hex: :mime, repo: "hexpm", optional: false]}, {:plug_crypto, "~> 1.1.1 or ~> 1.2 or ~> 2.0", [hex: :plug_crypto, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4.3 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "f6692046652a69a00a5a21d0b7e11fcf401064839d59d6b8787f23af55b1e6bc"},
   "plug_crypto": {:hex, :plug_crypto, "2.1.0", "f44309c2b06d249c27c8d3f65cfe08158ade08418cf540fd4f72d4d6863abb7b", [:mix], [], "hexpm", "131216a4b030b8f8ce0f26038bc4421ae60e4bb95c5cf5395e1421437824c4fa"},
   "postgrex": {:hex, :postgrex, "0.20.0", "363ed03ab4757f6bc47942eff7720640795eb557e1935951c1626f0d303a3aed", [:mix], [{:db_connection, "~> 2.1", [hex: :db_connection, repo: "hexpm", optional: false]}, {:decimal, "~> 1.5 or ~> 2.0", [hex: :decimal, repo: "hexpm", optional: false]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: true]}, {:table, "~> 0.1.0", [hex: :table, repo: "hexpm", optional: true]}], "hexpm", "d36ef8b36f323d29505314f704e21a1a038e2dc387c6409ee0cd24144e187c0f"},
-  "reactor": {:hex, :reactor, "0.13.3", "8d49362564970c3331ba306213bc2416c682a04bfab0f710ac3c740060bbdc71", [:mix], [{:igniter, "~> 0.4", [hex: :igniter, repo: "hexpm", optional: true]}, {:iterex, "~> 0.1", [hex: :iterex, repo: "hexpm", optional: false]}, {:libgraph, "~> 0.16", [hex: :libgraph, repo: "hexpm", optional: false]}, {:spark, "~> 2.0", [hex: :spark, repo: "hexpm", optional: false]}, {:splode, "~> 0.2", [hex: :splode, repo: "hexpm", optional: false]}, {:telemetry, "~> 1.2", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "b8227ed82a2aabaedc24a09e347002bb14c58701989d7383c51e941e03085180"},
-  "req": {:hex, :req, "0.5.8", "50d8d65279d6e343a5e46980ac2a70e97136182950833a1968b371e753f6a662", [:mix], [{:brotli, "~> 0.3.1", [hex: :brotli, repo: "hexpm", optional: true]}, {:ezstd, "~> 1.0", [hex: :ezstd, repo: "hexpm", optional: true]}, {:finch, "~> 0.17", [hex: :finch, repo: "hexpm", optional: false]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: false]}, {:mime, "~> 2.0.6 or ~> 2.1", [hex: :mime, repo: "hexpm", optional: false]}, {:nimble_csv, "~> 1.0", [hex: :nimble_csv, repo: "hexpm", optional: true]}, {:plug, "~> 1.0", [hex: :plug, repo: "hexpm", optional: true]}], "hexpm", "d7fc5898a566477e174f26887821a3c5082b243885520ee4b45555f5d53f40ef"},
+  "reactor": {:hex, :reactor, "0.15.0", "556937d9310e1a6dd06083592b9eb9e0d212540b6d82faecba70823ee7a0747d", [:mix], [{:igniter, "~> 0.4", [hex: :igniter, repo: "hexpm", optional: true]}, {:iterex, "~> 0.1", [hex: :iterex, repo: "hexpm", optional: false]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: false]}, {:libgraph, "~> 0.16", [hex: :libgraph, repo: "hexpm", optional: false]}, {:spark, "~> 2.0", [hex: :spark, repo: "hexpm", optional: false]}, {:splode, "~> 0.2", [hex: :splode, repo: "hexpm", optional: false]}, {:telemetry, "~> 1.2", [hex: :telemetry, repo: "hexpm", optional: false]}, {:yaml_elixir, "~> 2.11", [hex: :yaml_elixir, repo: "hexpm", optional: false]}, {:ymlr, "~> 5.0", [hex: :ymlr, repo: "hexpm", optional: false]}], "hexpm", "f634383a7760ba3106d31a3185f2e2c39e1485d899d884d94c22c62c9b5e7a4a"},
+  "req": {:hex, :req, "0.5.10", "a3a063eab8b7510785a467f03d30a8d95f66f5c3d9495be3474b61459c54376c", [:mix], [{:brotli, "~> 0.3.1", [hex: :brotli, repo: "hexpm", optional: true]}, {:ezstd, "~> 1.0", [hex: :ezstd, repo: "hexpm", optional: true]}, {:finch, "~> 0.17", [hex: :finch, repo: "hexpm", optional: false]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: false]}, {:mime, "~> 2.0.6 or ~> 2.1", [hex: :mime, repo: "hexpm", optional: false]}, {:nimble_csv, "~> 1.0", [hex: :nimble_csv, repo: "hexpm", optional: true]}, {:plug, "~> 1.0", [hex: :plug, repo: "hexpm", optional: true]}], "hexpm", "8a604815743f8a2d3b5de0659fa3137fa4b1cffd636ecb69b30b2b9b2c2559be"},
   "rewrite": {:hex, :rewrite, "1.1.2", "f5a5d10f5fed1491a6ff48e078d4585882695962ccc9e6c779bae025d1f92eda", [:mix], [{:glob_ex, "~> 0.1", [hex: :glob_ex, repo: "hexpm", optional: false]}, {:sourceror, "~> 1.0", [hex: :sourceror, repo: "hexpm", optional: false]}, {:text_diff, "~> 0.1", [hex: :text_diff, repo: "hexpm", optional: false]}], "hexpm", "7f8b94b1e3528d0a47b3e8b7bfeca559d2948a65fa7418a9ad7d7712703d39d4"},
   "slugify": {:hex, :slugify, "1.3.1", "0d3b8b7e5c1eeaa960e44dce94382bee34a39b3ea239293e457a9c5b47cc6fd3", [:mix], [], "hexpm", "cb090bbeb056b312da3125e681d98933a360a70d327820e4b7f91645c4d8be76"},
   "sourceror": {:hex, :sourceror, "1.7.1", "599d78f4cc2be7d55c9c4fd0a8d772fd0478e3a50e726697c20d13d02aa056d4", [:mix], [], "hexpm", "cd6f268fe29fa00afbc535e215158680a0662b357dc784646d7dff28ac65a0fc"},
-  "spark": {:hex, :spark, "2.2.45", "19e3a879e80d02853ded85ed7b4c0a84a5d2e395f9d0c884e1a13afbe026929d", [:mix], [{:igniter, ">= 0.3.64 and < 1.0.0-0", [hex: :igniter, repo: "hexpm", optional: true]}, {:jason, "~> 1.4", [hex: :jason, repo: "hexpm", optional: true]}, {:sourceror, "~> 1.2", [hex: :sourceror, repo: "hexpm", optional: true]}], "hexpm", "70b272d0ee16e3c10a4f8cf0ef6152840828152e68f2f8e3046e89567f2b49ad"},
-  "spitfire": {:hex, :spitfire, "0.1.5", "10b041e781bff9544d2fdf00893e1a325758408c5366a9bfa4333072568659b1", [:mix], [], "hexpm", "866a55d21fe827934ff38200111335c9dd311df13cbf2580ed71d84b0a783150"},
-  "splode": {:hex, :splode, "0.2.8", "289d4eec13e7a83061bc44827877eb4c575e1fdf198bd1a9c6449f9b64805059", [:mix], [], "hexpm", "dbe92fa526589416435e12203b56db1f74c834d207bc474016cedf930d987284"},
+  "spark": {:hex, :spark, "2.2.48", "dd1005c26c7f98ea686a951f7ae58fffb54eff19c47830e6ff68b93f87433baa", [:mix], [{:igniter, ">= 0.3.64 and < 1.0.0-0", [hex: :igniter, repo: "hexpm", optional: true]}, {:jason, "~> 1.4", [hex: :jason, repo: "hexpm", optional: true]}, {:sourceror, "~> 1.2", [hex: :sourceror, repo: "hexpm", optional: true]}], "hexpm", "379912647b9ddcc5265e91a82a235a264a727123d1f9e90052d91ad8cebbb2d0"},
+  "spitfire": {:hex, :spitfire, "0.2.0", "0de1f519a23f65bde40d316adad53c07a9563f25cc68915d639d8a509a0aad8a", [:mix], [], "hexpm", "743daaee2d81a0d8095431729f478ce49b47ea8943c7d770de86704975cb7775"},
+  "splode": {:hex, :splode, "0.2.9", "3a2776e187c82f42f5226b33b1220ccbff74f4bcc523dd4039c804caaa3ffdc7", [:mix], [], "hexpm", "8002b00c6e24f8bd1bcced3fbaa5c33346048047bb7e13d2f3ad428babbd95c3"},
   "stream_data": {:hex, :stream_data, "1.1.3", "15fdb14c64e84437901258bb56fc7d80aaf6ceaf85b9324f359e219241353bfb", [:mix], [], "hexpm", "859eb2be72d74be26c1c4f272905667672a52e44f743839c57c7ee73a1a66420"},
-  "swoosh": {:hex, :swoosh, "1.17.10", "3bfce0e716f92c85579c8b7bb390f1d287f388e4961bfb9343fe191ec4214225", [:mix], [{:bandit, ">= 1.0.0", [hex: :bandit, repo: "hexpm", optional: true]}, {:cowboy, "~> 1.1 or ~> 2.4", [hex: :cowboy, repo: "hexpm", optional: true]}, {:ex_aws, "~> 2.1", [hex: :ex_aws, repo: "hexpm", optional: true]}, {:finch, "~> 0.6", [hex: :finch, repo: "hexpm", optional: true]}, {:gen_smtp, "~> 0.13 or ~> 1.0", [hex: :gen_smtp, repo: "hexpm", optional: true]}, {:hackney, "~> 1.9", [hex: :hackney, repo: "hexpm", optional: true]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: false]}, {:mail, "~> 0.2", [hex: :mail, repo: "hexpm", optional: true]}, {:mime, "~> 1.1 or ~> 2.0", [hex: :mime, repo: "hexpm", optional: false]}, {:mua, "~> 0.2.3", [hex: :mua, repo: "hexpm", optional: true]}, {:multipart, "~> 0.4", [hex: :multipart, repo: "hexpm", optional: true]}, {:plug, "~> 1.9", [hex: :plug, repo: "hexpm", optional: true]}, {:plug_cowboy, ">= 1.0.0", [hex: :plug_cowboy, repo: "hexpm", optional: true]}, {:req, "~> 0.5 or ~> 1.0", [hex: :req, repo: "hexpm", optional: true]}, {:telemetry, "~> 0.4.2 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "277f86c249089f4fc7d70944987151b76424fac1d348d40685008ba88e0a2717"},
-  "tailwind": {:hex, :tailwind, "0.2.4", "5706ec47182d4e7045901302bf3a333e80f3d1af65c442ba9a9eed152fb26c2e", [:mix], [{:castore, ">= 0.0.0", [hex: :castore, repo: "hexpm", optional: false]}], "hexpm", "c6e4a82b8727bab593700c998a4d98cf3d8025678bfde059aed71d0000c3e463"},
+  "swoosh": {:hex, :swoosh, "1.18.3", "ca12197550bd7456654179055b1446168cc0f55067f784a3707e0e4462e269f5", [:mix], [{:bandit, ">= 1.0.0", [hex: :bandit, repo: "hexpm", optional: true]}, {:cowboy, "~> 1.1 or ~> 2.4", [hex: :cowboy, repo: "hexpm", optional: true]}, {:ex_aws, "~> 2.1", [hex: :ex_aws, repo: "hexpm", optional: true]}, {:finch, "~> 0.6", [hex: :finch, repo: "hexpm", optional: true]}, {:gen_smtp, "~> 0.13 or ~> 1.0", [hex: :gen_smtp, repo: "hexpm", optional: true]}, {:hackney, "~> 1.9", [hex: :hackney, repo: "hexpm", optional: true]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: false]}, {:mail, "~> 0.2", [hex: :mail, repo: "hexpm", optional: true]}, {:mime, "~> 1.1 or ~> 2.0", [hex: :mime, repo: "hexpm", optional: false]}, {:mua, "~> 0.2.3", [hex: :mua, repo: "hexpm", optional: true]}, {:multipart, "~> 0.4", [hex: :multipart, repo: "hexpm", optional: true]}, {:plug, "~> 1.9", [hex: :plug, repo: "hexpm", optional: true]}, {:plug_cowboy, ">= 1.0.0", [hex: :plug_cowboy, repo: "hexpm", optional: true]}, {:req, "~> 0.5.10 or ~> 0.6 or ~> 1.0", [hex: :req, repo: "hexpm", optional: true]}, {:telemetry, "~> 0.4.2 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "a533daccea84e887a061a919295212b37f4f2c7916436037eb8be7f1265bacba"},
+  "tailwind": {:hex, :tailwind, "0.3.1", "a89d2835c580748c7a975ad7dd3f2ea5e63216dc16d44f9df492fbd12c094bed", [:mix], [], "hexpm", "98a45febdf4a87bc26682e1171acdedd6317d0919953c353fcd1b4f9f4b676a2"},
   "telemetry": {:hex, :telemetry, "1.3.0", "fedebbae410d715cf8e7062c96a1ef32ec22e764197f70cda73d82778d61e7a2", [:rebar3], [], "hexpm", "7015fc8919dbe63764f4b4b87a95b7c0996bd539e0d499be6ec9d7f3875b79e6"},
   "telemetry_metrics": {:hex, :telemetry_metrics, "1.1.0", "5bd5f3b5637e0abea0426b947e3ce5dd304f8b3bc6617039e2b5a008adc02f8f", [:mix], [{:telemetry, "~> 0.4 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "e7b79e8ddfde70adb6db8a6623d1778ec66401f366e9a8f5dd0955c56bc8ce67"},
   "telemetry_poller": {:hex, :telemetry_poller, "1.1.0", "58fa7c216257291caaf8d05678c8d01bd45f4bdbc1286838a28c4bb62ef32999", [:rebar3], [{:telemetry, "~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "9eb9d9cbfd81cbd7cdd24682f8711b6e2b691289a0de6826e58452f28c103c8f"},
   "text_diff": {:hex, :text_diff, "0.1.0", "1caf3175e11a53a9a139bc9339bd607c47b9e376b073d4571c031913317fecaa", [:mix], [], "hexpm", "d1ffaaecab338e49357b6daa82e435f877e0649041ace7755583a0ea3362dbd7"},
-  "thousand_island": {:hex, :thousand_island, "1.3.10", "a9971ebab1dfb36e2710a86b37c3f54973fbc9470d892035334415521fb53328", [:mix], [{:telemetry, "~> 0.4 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "17ab1f1b13aadb1f4b4c8e5b59c06874d701119fed082884c9c6d38addad254f"},
+  "thousand_island": {:hex, :thousand_island, "1.3.12", "590ff651a6d2a59ed7eabea398021749bdc664e2da33e0355e6c64e7e1a2ef93", [:mix], [{:telemetry, "~> 0.4 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "55d0b1c868b513a7225892b8a8af0234d7c8981a51b0740369f3125f7c99a549"},
   "websock": {:hex, :websock, "0.5.3", "2f69a6ebe810328555b6fe5c831a851f485e303a7c8ce6c5f675abeb20ebdadc", [:mix], [], "hexpm", "6105453d7fac22c712ad66fab1d45abdf049868f253cf719b625151460b8b453"},
   "websock_adapter": {:hex, :websock_adapter, "0.5.8", "3b97dc94e407e2d1fc666b2fb9acf6be81a1798a2602294aac000260a7c4a47d", [:mix], [{:bandit, ">= 0.6.0", [hex: :bandit, repo: "hexpm", optional: true]}, {:plug, "~> 1.14", [hex: :plug, repo: "hexpm", optional: false]}, {:plug_cowboy, "~> 2.6", [hex: :plug_cowboy, repo: "hexpm", optional: true]}, {:websock, "~> 0.5", [hex: :websock, repo: "hexpm", optional: false]}], "hexpm", "315b9a1865552212b5f35140ad194e67ce31af45bcee443d4ecb96b5fd3f3782"},
+  "yamerl": {:hex, :yamerl, "0.10.0", "4ff81fee2f1f6a46f1700c0d880b24d193ddb74bd14ef42cb0bcf46e81ef2f8e", [:rebar3], [], "hexpm", "346adb2963f1051dc837a2364e4acf6eb7d80097c0f53cbdc3046ec8ec4b4e6e"},
+  "yaml_elixir": {:hex, :yaml_elixir, "2.11.0", "9e9ccd134e861c66b84825a3542a1c22ba33f338d82c07282f4f1f52d847bd50", [:mix], [{:yamerl, "~> 0.10", [hex: :yamerl, repo: "hexpm", optional: false]}], "hexpm", "53cc28357ee7eb952344995787f4bb8cc3cecbf189652236e9b163e8ce1bc242"},
+  "ymlr": {:hex, :ymlr, "5.1.3", "a8061add5a378e20272a31905be70209a5680fdbe0ad51f40cb1af4bdd0a010b", [:mix], [], "hexpm", "8663444fa85101a117887c170204d4c5a2182567e5f84767f0071cf15f2efb1e"},
 }
diff --git a/priv/repo/migrations/20250227155431_add_permission_table.exs b/priv/repo/migrations/20250227155431_add_permission_table.exs
new file mode 100644
index 0000000..dbea3ae
--- /dev/null
+++ b/priv/repo/migrations/20250227155431_add_permission_table.exs
@@ -0,0 +1,29 @@
+defmodule Helpcenter.Repo.Migrations.AddPermissionTable do
+  @moduledoc """
+  Updates resources based on their most recent snapshots.
+
+  This file was autogenerated with `mix ash_postgres.generate_migrations`
+  """
+
+  use Ecto.Migration
+
+  def up do
+    create table(:permissions, primary_key: false) do
+      add :id, :uuid, null: false, default: fragment("uuid_generate_v7()"), primary_key: true
+      add :action, :text, null: false
+      add :resource, :text, null: false
+
+      add :inserted_at, :utc_datetime_usec,
+        null: false,
+        default: fragment("(now() AT TIME ZONE 'utc')")
+
+      add :updated_at, :utc_datetime_usec,
+        null: false,
+        default: fragment("(now() AT TIME ZONE 'utc')")
+    end
+  end
+
+  def down do
+    drop table(:permissions)
+  end
+end
diff --git a/priv/repo/tenant_migrations/20250227160356_add_groups_table.exs b/priv/repo/tenant_migrations/20250227160356_add_groups_table.exs
new file mode 100644
index 0000000..23def1d
--- /dev/null
+++ b/priv/repo/tenant_migrations/20250227160356_add_groups_table.exs
@@ -0,0 +1,29 @@
+defmodule Helpcenter.Repo.TenantMigrations.AddGroupsTable do
+  @moduledoc """
+  Updates resources based on their most recent snapshots.
+
+  This file was autogenerated with `mix ash_postgres.generate_migrations`
+  """
+
+  use Ecto.Migration
+
+  def up do
+    create table(:groups, primary_key: false, prefix: prefix()) do
+      add :id, :uuid, null: false, default: fragment("uuid_generate_v7()"), primary_key: true
+      add :action, :text, null: false
+      add :resource, :text, null: false
+
+      add :inserted_at, :utc_datetime_usec,
+        null: false,
+        default: fragment("(now() AT TIME ZONE 'utc')")
+
+      add :updated_at, :utc_datetime_usec,
+        null: false,
+        default: fragment("(now() AT TIME ZONE 'utc')")
+    end
+  end
+
+  def down do
+    drop table(:groups, prefix: prefix())
+  end
+end
diff --git a/priv/repo/tenant_migrations/20250227160638_add_groups_table_2.exs b/priv/repo/tenant_migrations/20250227160638_add_groups_table_2.exs
new file mode 100644
index 0000000..ba6c826
--- /dev/null
+++ b/priv/repo/tenant_migrations/20250227160638_add_groups_table_2.exs
@@ -0,0 +1,35 @@
+defmodule Helpcenter.Repo.TenantMigrations.AddGroupsTable2 do
+  @moduledoc """
+  Updates resources based on their most recent snapshots.
+
+  This file was autogenerated with `mix ash_postgres.generate_migrations`
+  """
+
+  use Ecto.Migration
+
+  def up do
+    rename table(:groups), :action, to: :name
+
+    rename table(:groups), :resource, to: :description
+
+    alter table(:groups, prefix: prefix()) do
+      modify :description, :text
+      modify :name, :text
+    end
+
+    create unique_index(:groups, [:name], name: "groups_unique_name_index")
+  end
+
+  def down do
+    drop_if_exists unique_index(:groups, [:name], name: "groups_unique_name_index")
+
+    alter table(:groups, prefix: prefix()) do
+      modify :action, :text
+      modify :resource, :text
+    end
+
+    rename table(:groups), :description, to: :resource
+
+    rename table(:groups), :name, to: :action
+  end
+end
diff --git a/priv/repo/tenant_migrations/20250227162448_add_group_permissions_table.exs b/priv/repo/tenant_migrations/20250227162448_add_group_permissions_table.exs
new file mode 100644
index 0000000..43a223a
--- /dev/null
+++ b/priv/repo/tenant_migrations/20250227162448_add_group_permissions_table.exs
@@ -0,0 +1,57 @@
+defmodule Helpcenter.Repo.TenantMigrations.AddGroupPermissionsTable do
+  @moduledoc """
+  Updates resources based on their most recent snapshots.
+
+  This file was autogenerated with `mix ash_postgres.generate_migrations`
+  """
+
+  use Ecto.Migration
+
+  def up do
+    create table(:group_permissions, primary_key: false, prefix: prefix()) do
+      add :id, :uuid, null: false, default: fragment("uuid_generate_v7()"), primary_key: true
+
+      add :inserted_at, :utc_datetime_usec,
+        null: false,
+        default: fragment("(now() AT TIME ZONE 'utc')")
+
+      add :updated_at, :utc_datetime_usec,
+        null: false,
+        default: fragment("(now() AT TIME ZONE 'utc')")
+
+      add :group_id,
+          references(:groups,
+            column: :id,
+            name: "group_permissions_group_id_fkey",
+            type: :uuid,
+            prefix: prefix()
+          ),
+          null: false
+
+      add :permission_id,
+          references(:permissions,
+            column: :id,
+            name: "group_permissions_permission_id_fkey",
+            type: :uuid,
+            prefix: "public"
+          ),
+          null: false
+    end
+
+    create unique_index(:group_permissions, [:group_id, :permission_id],
+             name: "group_permissions_unique_name_index"
+           )
+  end
+
+  def down do
+    drop_if_exists unique_index(:group_permissions, [:group_id, :permission_id],
+                     name: "group_permissions_unique_name_index"
+                   )
+
+    drop constraint(:group_permissions, "group_permissions_group_id_fkey")
+
+    drop constraint(:group_permissions, "group_permissions_permission_id_fkey")
+
+    drop table(:group_permissions, prefix: prefix())
+  end
+end
diff --git a/priv/repo/tenant_migrations/20250227163556_add_user_group_table.exs b/priv/repo/tenant_migrations/20250227163556_add_user_group_table.exs
new file mode 100644
index 0000000..eb17615
--- /dev/null
+++ b/priv/repo/tenant_migrations/20250227163556_add_user_group_table.exs
@@ -0,0 +1,57 @@
+defmodule Helpcenter.Repo.TenantMigrations.AddUserGroupTable do
+  @moduledoc """
+  Updates resources based on their most recent snapshots.
+
+  This file was autogenerated with `mix ash_postgres.generate_migrations`
+  """
+
+  use Ecto.Migration
+
+  def up do
+    create table(:user_groups, primary_key: false, prefix: prefix()) do
+      add :id, :uuid, null: false, default: fragment("uuid_generate_v7()"), primary_key: true
+
+      add :inserted_at, :utc_datetime_usec,
+        null: false,
+        default: fragment("(now() AT TIME ZONE 'utc')")
+
+      add :updated_at, :utc_datetime_usec,
+        null: false,
+        default: fragment("(now() AT TIME ZONE 'utc')")
+
+      add :group_id,
+          references(:groups,
+            column: :id,
+            name: "user_groups_group_id_fkey",
+            type: :uuid,
+            prefix: prefix()
+          ),
+          null: false
+
+      add :user_id,
+          references(:users,
+            column: :id,
+            name: "user_groups_user_id_fkey",
+            type: :uuid,
+            prefix: "public"
+          ),
+          null: false
+    end
+
+    create unique_index(:user_groups, [:group_id, :user_id],
+             name: "user_groups_unique_name_index"
+           )
+  end
+
+  def down do
+    drop_if_exists unique_index(:user_groups, [:group_id, :user_id],
+                     name: "user_groups_unique_name_index"
+                   )
+
+    drop constraint(:user_groups, "user_groups_group_id_fkey")
+
+    drop constraint(:user_groups, "user_groups_user_id_fkey")
+
+    drop table(:user_groups, prefix: prefix())
+  end
+end
diff --git a/priv/repo/tenant_migrations/20250309160517_refactored_group_permissions_relationshp.exs b/priv/repo/tenant_migrations/20250309160517_refactored_group_permissions_relationshp.exs
new file mode 100644
index 0000000..5cb7a5f
--- /dev/null
+++ b/priv/repo/tenant_migrations/20250309160517_refactored_group_permissions_relationshp.exs
@@ -0,0 +1,49 @@
+defmodule Helpcenter.Repo.TenantMigrations.RefactoredGroupPermissionsRelationshp do
+  @moduledoc """
+  Updates resources based on their most recent snapshots.
+
+  This file was autogenerated with `mix ash_postgres.generate_migrations`
+  """
+
+  use Ecto.Migration
+
+  def up do
+    alter table(:group_permissions, prefix: prefix()) do
+      remove :permission_id
+      add :action, :text, null: false
+      add :resource, :text, null: false
+    end
+
+    drop_if_exists unique_index(:group_permissions, [:group_id, :permission_id],
+                     name: "group_permissions_unique_name_index"
+                   )
+
+    create unique_index(:group_permissions, [:group_id, :resource, :action],
+             name: "group_permissions_unique_name_index"
+           )
+  end
+
+  def down do
+    drop_if_exists unique_index(:group_permissions, [:group_id, :resource, :action],
+                     name: "group_permissions_unique_name_index"
+                   )
+
+    create unique_index(:group_permissions, [:group_id, :permission_id],
+             name: "group_permissions_unique_name_index"
+           )
+
+    alter table(:group_permissions, prefix: prefix()) do
+      remove :resource
+      remove :action
+
+      add :permission_id,
+          references(:permissions,
+            column: :id,
+            name: "group_permissions_permission_id_fkey",
+            type: :uuid,
+            prefix: "public"
+          ),
+          null: false
+    end
+  end
+end
diff --git a/priv/repo/tenant_migrations/20250317072016_updated_group_permission_identity.exs b/priv/repo/tenant_migrations/20250317072016_updated_group_permission_identity.exs
new file mode 100644
index 0000000..c986e94
--- /dev/null
+++ b/priv/repo/tenant_migrations/20250317072016_updated_group_permission_identity.exs
@@ -0,0 +1,29 @@
+defmodule Helpcenter.Repo.TenantMigrations.UpdatedGroupPermissionIdentity do
+  @moduledoc """
+  Updates resources based on their most recent snapshots.
+
+  This file was autogenerated with `mix ash_postgres.generate_migrations`
+  """
+
+  use Ecto.Migration
+
+  def up do
+    drop_if_exists unique_index(:group_permissions, [:group_id, :resource, :action],
+                     name: "group_permissions_unique_name_index"
+                   )
+
+    create unique_index(:group_permissions, [:group_id, :resource, :action],
+             name: "group_permissions_unique_group_permission_index"
+           )
+  end
+
+  def down do
+    drop_if_exists unique_index(:group_permissions, [:group_id, :resource, :action],
+                     name: "group_permissions_unique_group_permission_index"
+                   )
+
+    create unique_index(:group_permissions, [:group_id, :resource, :action],
+             name: "group_permissions_unique_name_index"
+           )
+  end
+end
diff --git a/priv/resource_snapshots/repo/permissions/20250227155431.json b/priv/resource_snapshots/repo/permissions/20250227155431.json
new file mode 100644
index 0000000..de9e227
--- /dev/null
+++ b/priv/resource_snapshots/repo/permissions/20250227155431.json
@@ -0,0 +1,69 @@
+{
+  "attributes": [
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"uuid_generate_v7()\")",
+      "generated?": false,
+      "primary_key?": true,
+      "references": null,
+      "size": null,
+      "source": "id",
+      "type": "uuid"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "action",
+      "type": "text"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "resource",
+      "type": "text"
+    },
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"(now() AT TIME ZONE 'utc')\")",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "inserted_at",
+      "type": "utc_datetime_usec"
+    },
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"(now() AT TIME ZONE 'utc')\")",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "updated_at",
+      "type": "utc_datetime_usec"
+    }
+  ],
+  "base_filter": null,
+  "check_constraints": [],
+  "custom_indexes": [],
+  "custom_statements": [],
+  "has_create_action": true,
+  "hash": "92233162AF7B652BFCB9EB415A471503F10D4B7D6913E98871C67D56442A1B74",
+  "identities": [],
+  "multitenancy": {
+    "attribute": null,
+    "global": null,
+    "strategy": null
+  },
+  "repo": "Elixir.Helpcenter.Repo",
+  "schema": null,
+  "table": "permissions"
+}
\ No newline at end of file
diff --git a/priv/resource_snapshots/repo/tenants/group_permissions/20250227162448.json b/priv/resource_snapshots/repo/tenants/group_permissions/20250227162448.json
new file mode 100644
index 0000000..77fe347
--- /dev/null
+++ b/priv/resource_snapshots/repo/tenants/group_permissions/20250227162448.json
@@ -0,0 +1,126 @@
+{
+  "attributes": [
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"uuid_generate_v7()\")",
+      "generated?": false,
+      "primary_key?": true,
+      "references": null,
+      "size": null,
+      "source": "id",
+      "type": "uuid"
+    },
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"(now() AT TIME ZONE 'utc')\")",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "inserted_at",
+      "type": "utc_datetime_usec"
+    },
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"(now() AT TIME ZONE 'utc')\")",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "updated_at",
+      "type": "utc_datetime_usec"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": {
+        "deferrable": false,
+        "destination_attribute": "id",
+        "destination_attribute_default": null,
+        "destination_attribute_generated": null,
+        "index?": false,
+        "match_type": null,
+        "match_with": null,
+        "multitenancy": {
+          "attribute": null,
+          "global": false,
+          "strategy": "context"
+        },
+        "name": "group_permissions_group_id_fkey",
+        "on_delete": null,
+        "on_update": null,
+        "primary_key?": true,
+        "schema": "public",
+        "table": "groups"
+      },
+      "size": null,
+      "source": "group_id",
+      "type": "uuid"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": {
+        "deferrable": false,
+        "destination_attribute": "id",
+        "destination_attribute_default": null,
+        "destination_attribute_generated": null,
+        "index?": false,
+        "match_type": null,
+        "match_with": null,
+        "multitenancy": {
+          "attribute": null,
+          "global": null,
+          "strategy": null
+        },
+        "name": "group_permissions_permission_id_fkey",
+        "on_delete": null,
+        "on_update": null,
+        "primary_key?": true,
+        "schema": "public",
+        "table": "permissions"
+      },
+      "size": null,
+      "source": "permission_id",
+      "type": "uuid"
+    }
+  ],
+  "base_filter": null,
+  "check_constraints": [],
+  "custom_indexes": [],
+  "custom_statements": [],
+  "has_create_action": true,
+  "hash": "043ECC99CFF58CE3892AA6AD28BEA8A36CD37C4244F6784D6D49C0699BB081B1",
+  "identities": [
+    {
+      "all_tenants?": false,
+      "base_filter": null,
+      "index_name": "group_permissions_unique_name_index",
+      "keys": [
+        {
+          "type": "atom",
+          "value": "group_id"
+        },
+        {
+          "type": "atom",
+          "value": "permission_id"
+        }
+      ],
+      "name": "unique_name",
+      "nils_distinct?": true,
+      "where": null
+    }
+  ],
+  "multitenancy": {
+    "attribute": null,
+    "global": false,
+    "strategy": "context"
+  },
+  "repo": "Elixir.Helpcenter.Repo",
+  "schema": null,
+  "table": "group_permissions"
+}
\ No newline at end of file
diff --git a/priv/resource_snapshots/repo/tenants/group_permissions/20250309160517.json b/priv/resource_snapshots/repo/tenants/group_permissions/20250309160517.json
new file mode 100644
index 0000000..2561673
--- /dev/null
+++ b/priv/resource_snapshots/repo/tenants/group_permissions/20250309160517.json
@@ -0,0 +1,121 @@
+{
+  "attributes": [
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"uuid_generate_v7()\")",
+      "generated?": false,
+      "primary_key?": true,
+      "references": null,
+      "size": null,
+      "source": "id",
+      "type": "uuid"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "action",
+      "type": "text"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "resource",
+      "type": "text"
+    },
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"(now() AT TIME ZONE 'utc')\")",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "inserted_at",
+      "type": "utc_datetime_usec"
+    },
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"(now() AT TIME ZONE 'utc')\")",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "updated_at",
+      "type": "utc_datetime_usec"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": {
+        "deferrable": false,
+        "destination_attribute": "id",
+        "destination_attribute_default": null,
+        "destination_attribute_generated": null,
+        "index?": false,
+        "match_type": null,
+        "match_with": null,
+        "multitenancy": {
+          "attribute": null,
+          "global": false,
+          "strategy": "context"
+        },
+        "name": "group_permissions_group_id_fkey",
+        "on_delete": null,
+        "on_update": null,
+        "primary_key?": true,
+        "schema": "public",
+        "table": "groups"
+      },
+      "size": null,
+      "source": "group_id",
+      "type": "uuid"
+    }
+  ],
+  "base_filter": null,
+  "check_constraints": [],
+  "custom_indexes": [],
+  "custom_statements": [],
+  "has_create_action": true,
+  "hash": "88151F644AE58DC0342D386114544E6713680426CB768763152A59D2724962E9",
+  "identities": [
+    {
+      "all_tenants?": false,
+      "base_filter": null,
+      "index_name": "group_permissions_unique_name_index",
+      "keys": [
+        {
+          "type": "atom",
+          "value": "group_id"
+        },
+        {
+          "type": "atom",
+          "value": "resource"
+        },
+        {
+          "type": "atom",
+          "value": "action"
+        }
+      ],
+      "name": "unique_name",
+      "nils_distinct?": true,
+      "where": null
+    }
+  ],
+  "multitenancy": {
+    "attribute": null,
+    "global": false,
+    "strategy": "context"
+  },
+  "repo": "Elixir.Helpcenter.Repo",
+  "schema": null,
+  "table": "group_permissions"
+}
\ No newline at end of file
diff --git a/priv/resource_snapshots/repo/tenants/group_permissions/20250317072016.json b/priv/resource_snapshots/repo/tenants/group_permissions/20250317072016.json
new file mode 100644
index 0000000..ca4f2f5
--- /dev/null
+++ b/priv/resource_snapshots/repo/tenants/group_permissions/20250317072016.json
@@ -0,0 +1,121 @@
+{
+  "attributes": [
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"uuid_generate_v7()\")",
+      "generated?": false,
+      "primary_key?": true,
+      "references": null,
+      "size": null,
+      "source": "id",
+      "type": "uuid"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "action",
+      "type": "text"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "resource",
+      "type": "text"
+    },
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"(now() AT TIME ZONE 'utc')\")",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "inserted_at",
+      "type": "utc_datetime_usec"
+    },
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"(now() AT TIME ZONE 'utc')\")",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "updated_at",
+      "type": "utc_datetime_usec"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": {
+        "deferrable": false,
+        "destination_attribute": "id",
+        "destination_attribute_default": null,
+        "destination_attribute_generated": null,
+        "index?": false,
+        "match_type": null,
+        "match_with": null,
+        "multitenancy": {
+          "attribute": null,
+          "global": false,
+          "strategy": "context"
+        },
+        "name": "group_permissions_group_id_fkey",
+        "on_delete": null,
+        "on_update": null,
+        "primary_key?": true,
+        "schema": "public",
+        "table": "groups"
+      },
+      "size": null,
+      "source": "group_id",
+      "type": "uuid"
+    }
+  ],
+  "base_filter": null,
+  "check_constraints": [],
+  "custom_indexes": [],
+  "custom_statements": [],
+  "has_create_action": true,
+  "hash": "EC8DDC3B3B4B7128E95425E390A4B3A201A4437455FA98353D6D3EC5CD63E3E0",
+  "identities": [
+    {
+      "all_tenants?": false,
+      "base_filter": null,
+      "index_name": "group_permissions_unique_group_permission_index",
+      "keys": [
+        {
+          "type": "atom",
+          "value": "group_id"
+        },
+        {
+          "type": "atom",
+          "value": "resource"
+        },
+        {
+          "type": "atom",
+          "value": "action"
+        }
+      ],
+      "name": "unique_group_permission",
+      "nils_distinct?": true,
+      "where": null
+    }
+  ],
+  "multitenancy": {
+    "attribute": null,
+    "global": false,
+    "strategy": "context"
+  },
+  "repo": "Elixir.Helpcenter.Repo",
+  "schema": null,
+  "table": "group_permissions"
+}
\ No newline at end of file
diff --git a/priv/resource_snapshots/repo/tenants/groups/20250227160356.json b/priv/resource_snapshots/repo/tenants/groups/20250227160356.json
new file mode 100644
index 0000000..4996eb2
--- /dev/null
+++ b/priv/resource_snapshots/repo/tenants/groups/20250227160356.json
@@ -0,0 +1,69 @@
+{
+  "attributes": [
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"uuid_generate_v7()\")",
+      "generated?": false,
+      "primary_key?": true,
+      "references": null,
+      "size": null,
+      "source": "id",
+      "type": "uuid"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "action",
+      "type": "text"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "resource",
+      "type": "text"
+    },
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"(now() AT TIME ZONE 'utc')\")",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "inserted_at",
+      "type": "utc_datetime_usec"
+    },
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"(now() AT TIME ZONE 'utc')\")",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "updated_at",
+      "type": "utc_datetime_usec"
+    }
+  ],
+  "base_filter": null,
+  "check_constraints": [],
+  "custom_indexes": [],
+  "custom_statements": [],
+  "has_create_action": true,
+  "hash": "CC954CFE43E8929C7072B7D50F48AAEA9B4E2CFD197BE536D83845880161FD4C",
+  "identities": [],
+  "multitenancy": {
+    "attribute": null,
+    "global": false,
+    "strategy": "context"
+  },
+  "repo": "Elixir.Helpcenter.Repo",
+  "schema": null,
+  "table": "groups"
+}
\ No newline at end of file
diff --git a/priv/resource_snapshots/repo/tenants/groups/20250227160638.json b/priv/resource_snapshots/repo/tenants/groups/20250227160638.json
new file mode 100644
index 0000000..9e64ebe
--- /dev/null
+++ b/priv/resource_snapshots/repo/tenants/groups/20250227160638.json
@@ -0,0 +1,84 @@
+{
+  "attributes": [
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"uuid_generate_v7()\")",
+      "generated?": false,
+      "primary_key?": true,
+      "references": null,
+      "size": null,
+      "source": "id",
+      "type": "uuid"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "name",
+      "type": "text"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "description",
+      "type": "text"
+    },
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"(now() AT TIME ZONE 'utc')\")",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "inserted_at",
+      "type": "utc_datetime_usec"
+    },
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"(now() AT TIME ZONE 'utc')\")",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "updated_at",
+      "type": "utc_datetime_usec"
+    }
+  ],
+  "base_filter": null,
+  "check_constraints": [],
+  "custom_indexes": [],
+  "custom_statements": [],
+  "has_create_action": true,
+  "hash": "884234CF911E575862F11C098E83871155E72D629033EEAB6E36158B5B64D976",
+  "identities": [
+    {
+      "all_tenants?": false,
+      "base_filter": null,
+      "index_name": "groups_unique_name_index",
+      "keys": [
+        {
+          "type": "atom",
+          "value": "name"
+        }
+      ],
+      "name": "unique_name",
+      "nils_distinct?": true,
+      "where": null
+    }
+  ],
+  "multitenancy": {
+    "attribute": null,
+    "global": false,
+    "strategy": "context"
+  },
+  "repo": "Elixir.Helpcenter.Repo",
+  "schema": null,
+  "table": "groups"
+}
\ No newline at end of file
diff --git a/priv/resource_snapshots/repo/tenants/user_groups/20250227163556.json b/priv/resource_snapshots/repo/tenants/user_groups/20250227163556.json
new file mode 100644
index 0000000..0585d7c
--- /dev/null
+++ b/priv/resource_snapshots/repo/tenants/user_groups/20250227163556.json
@@ -0,0 +1,126 @@
+{
+  "attributes": [
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"uuid_generate_v7()\")",
+      "generated?": false,
+      "primary_key?": true,
+      "references": null,
+      "size": null,
+      "source": "id",
+      "type": "uuid"
+    },
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"(now() AT TIME ZONE 'utc')\")",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "inserted_at",
+      "type": "utc_datetime_usec"
+    },
+    {
+      "allow_nil?": false,
+      "default": "fragment(\"(now() AT TIME ZONE 'utc')\")",
+      "generated?": false,
+      "primary_key?": false,
+      "references": null,
+      "size": null,
+      "source": "updated_at",
+      "type": "utc_datetime_usec"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": {
+        "deferrable": false,
+        "destination_attribute": "id",
+        "destination_attribute_default": null,
+        "destination_attribute_generated": null,
+        "index?": false,
+        "match_type": null,
+        "match_with": null,
+        "multitenancy": {
+          "attribute": null,
+          "global": false,
+          "strategy": "context"
+        },
+        "name": "user_groups_group_id_fkey",
+        "on_delete": null,
+        "on_update": null,
+        "primary_key?": true,
+        "schema": "public",
+        "table": "groups"
+      },
+      "size": null,
+      "source": "group_id",
+      "type": "uuid"
+    },
+    {
+      "allow_nil?": false,
+      "default": "nil",
+      "generated?": false,
+      "primary_key?": false,
+      "references": {
+        "deferrable": false,
+        "destination_attribute": "id",
+        "destination_attribute_default": null,
+        "destination_attribute_generated": null,
+        "index?": false,
+        "match_type": null,
+        "match_with": null,
+        "multitenancy": {
+          "attribute": null,
+          "global": null,
+          "strategy": null
+        },
+        "name": "user_groups_user_id_fkey",
+        "on_delete": null,
+        "on_update": null,
+        "primary_key?": true,
+        "schema": "public",
+        "table": "users"
+      },
+      "size": null,
+      "source": "user_id",
+      "type": "uuid"
+    }
+  ],
+  "base_filter": null,
+  "check_constraints": [],
+  "custom_indexes": [],
+  "custom_statements": [],
+  "has_create_action": true,
+  "hash": "77655738322999764105F4EFB35CB620061509E07123201207376985DE38128A",
+  "identities": [
+    {
+      "all_tenants?": false,
+      "base_filter": null,
+      "index_name": "user_groups_unique_name_index",
+      "keys": [
+        {
+          "type": "atom",
+          "value": "group_id"
+        },
+        {
+          "type": "atom",
+          "value": "user_id"
+        }
+      ],
+      "name": "unique_name",
+      "nils_distinct?": true,
+      "where": null
+    }
+  ],
+  "multitenancy": {
+    "attribute": null,
+    "global": false,
+    "strategy": "context"
+  },
+  "repo": "Elixir.Helpcenter.Repo",
+  "schema": null,
+  "table": "user_groups"
+}
\ No newline at end of file
diff --git a/test/helpcenter/accounts/access_group_live_test.exs b/test/helpcenter/accounts/access_group_live_test.exs
new file mode 100644
index 0000000..7cb7b4b
--- /dev/null
+++ b/test/helpcenter/accounts/access_group_live_test.exs
@@ -0,0 +1,142 @@
+# test/helpcenter/accounts/access_group_live_test.exs
+defmodule Helpcenter.Accounts.AccessGroupLiveTest do
+  use HelpcenterWeb.ConnCase, async: false
+  import AuthCase
+
+  describe "User Access Group Test:" do
+    test "All actions can be listed for permissions" do
+      assert Helpcenter.permissions()
+             |> is_list()
+    end
+
+    # test/helpcenter/accounts/access_group_live_test.exs
+    test "Group form renders successfully" do
+      user = create_user()
+
+      assigns = %{
+        actor: user,
+        group_id: nil,
+        id: Ash.UUIDv7.generate()
+      }
+
+      html = render_component(HelpcenterWeb.Accounts.Groups.GroupForm, assigns)
+
+      # Confirm that all necessary fields are there
+      assert html =~ "access-group-modal-button"
+      assert html =~ "form[name]"
+      assert html =~ "form[description]"
+      assert html =~ gettext("Submit")
+    end
+
+    test "Existing group renders successfully with the component" do
+      user = create_user()
+      group = get_group(user)
+
+      assigns = %{
+        actor: user,
+        group_id: group.id,
+        id: Ash.UUIDv7.generate()
+      }
+
+      html = render_component(HelpcenterWeb.Accounts.Groups.GroupForm, assigns)
+
+      # Confirm that all necessary fields are visible
+      assert html =~ "access-group-modal-button"
+      assert html =~ "form[name]"
+      assert html =~ "form[description]"
+      assert html =~ gettext("Submit")
+
+      # Confirm that group data is visible in the form
+      assert html =~ group.name
+      assert html =~ group.description
+    end
+
+    test "Guests should be redirected to login while accessing /accounts/groups", %{conn: conn} do
+      assert conn
+             |> live(~p"/accounts/groups")
+             |> follow_redirect(conn, "/sign-in")
+    end
+
+    test "Access groups can be listed", %{conn: conn} do
+      user = create_user()
+      groups = get_groups(user)
+
+      {:ok, _view, html} =
+        conn
+        |> login(user)
+        |> live(~p"/accounts/groups")
+
+      # Confirm that user can see the button to add a group form
+      assert html =~ "access-group-modal-button"
+
+      # Confirm that all groups ares listed
+      for group <- groups do
+        assert html =~ group.name
+        assert html =~ group.description
+      end
+    end
+
+    test "Access Group can be created", %{conn: conn} do
+      user = create_user()
+
+      {:ok, view, _html} =
+        conn
+        |> login(user)
+        |> live(~p"/accounts/groups")
+
+      attrs = %{name: "Support", description: "Customer support representative"}
+
+      # Form can be validated
+      assert view
+             |> form("#access-group-form", form: attrs)
+             |> render_change()
+
+      #  Form can be submitted
+      assert view
+             |> form("#access-group-form", form: attrs)
+             |> render_submit()
+
+      # Confirm that data was actually stores data
+      require Ash.Query
+
+      assert Helpcenter.Accounts.Group
+             |> Ash.Query.filter(name == ^attrs.name)
+             |> Ash.Query.filter(description == ^attrs.description)
+             |> Ash.exists?(actor: user)
+    end
+
+    test "Access group can be edited", %{conn: conn} do
+      user = get_user()
+      group = get_group(user)
+
+      {:ok, view, html} =
+        conn
+        |> login(user)
+        |> live(~p"/accounts/groups")
+
+      # confirm that the group is visible on the page
+      assert html =~ group.name
+      assert html =~ group.description
+      assert html =~ ~p"/accounts/groups/#{group.id}/permissions"
+
+      # Confirm user can click on the link to group edit
+      assert view
+             |> element("#edit-access-group-#{group.id}")
+             |> render_click()
+
+      # Confirm that edit group page display the group details
+      {:ok, _edit_view, edit_html} =
+        conn
+        |> login(user)
+        |> live(~p"/accounts/groups/#{group.id}/permissions")
+
+      assert edit_html =~ group.name
+      assert edit_html =~ group.description
+
+      # Confirm that user can see all permissions in the app listed
+      for perm <- Helpcenter.permissions() do
+        assert edit_html =~ "form[#{perm.resource}][#{perm.action}]"
+      end
+    end
+  end
+end
diff --git a/test/helpcenter/accounts/authorized_test.exs b/test/helpcenter/accounts/authorized_test.exs
new file mode 100644
index 0000000..d87e096
--- /dev/null
+++ b/test/helpcenter/accounts/authorized_test.exs
@@ -0,0 +1,72 @@
+# test/helpcenter/accounts/authorized_test.exs
+defmodule Helpcenter.Accounts.AuthorizedTest do
+  use HelpcenterWeb.ConnCase, async: false
+
+  describe "Authorized Check" do
+    test "Team owner is always authorized" do
+      owner = create_user()
+
+      assert Ash.can?({Helpcenter.KnowledgeBase.Category, :create}, owner)
+      assert Ash.can?({Helpcenter.KnowledgeBase.Category, :read}, owner)
+      assert Ash.can?({Helpcenter.KnowledgeBase.Category, :update}, owner)
+      assert Ash.can?({Helpcenter.KnowledgeBase.Category, :destroy}, owner)
+    end
+
+    test "Nil actors are not authorized" do
+      user = nil
+
+      refute Ash.can?({Helpcenter.KnowledgeBase.Category, :create}, user)
+      refute Ash.can?({Helpcenter.KnowledgeBase.Category, :read}, user)
+      refute Ash.can?({Helpcenter.KnowledgeBase.Category, :update}, user)
+      refute Ash.can?({Helpcenter.KnowledgeBase.Category, :destroy}, user)
+    end
+
+    test "Non team owner are allowed if they have permission" do
+      owner = create_user()
+
+      user =
+        Ash.Seed.seed!(Helpcenter.Accounts.User, %{
+          email: "new_user@example.com",
+          current_team: owner.current_team
+        })
+
+      tenant = user.current_team
+
+      # Add user to the team
+      team = Ash.read_first!(Helpcenter.Accounts.Team)
+      user_team_attrs = %{user_id: user.id, team_id: team.id}
+      _user_team = Ash.Seed.seed!(Helpcenter.Accounts.UserTeam, user_team_attrs)
+
+      # Add Access group
+      group =
+        Ash.Seed.seed!(
+          Helpcenter.Accounts.Group,
+          %{name: "Accountant", description: "Finance accountant"},
+          tenant: tenant,
+          authorize?: false
+        )
+
+      # Add group permission
+      Ash.Seed.seed!(
+        Helpcenter.Accounts.GroupPermission,
+        %{group_id: group.id, action: :read, resource: Helpcenter.KnowledgeBase.Category},
+        tenant: tenant,
+        authorize?: false
+      )
+
+      # Add user to the group
+      Ash.Seed.seed!(
+        Helpcenter.Accounts.UserGroup,
+        %{user_id: user.id, group_id: group.id},
+        tenant: tenant,
+        authorize?: false
+      )
+
+      # # Confirm that this user is not authorized to create but authorized to read
+      assert Ash.can?({Helpcenter.KnowledgeBase.Category, :read}, user)
+      refute Ash.can?({Helpcenter.KnowledgeBase.Category, :create}, user)
+      refute Ash.can?({Helpcenter.KnowledgeBase.Category, :update}, user)
+      refute Ash.can?({Helpcenter.KnowledgeBase.Category, :destroy}, user)
+    end
+  end
+end
diff --git a/test/helpcenter/accounts/group_permission_test.exs b/test/helpcenter/accounts/group_permission_test.exs
new file mode 100644
index 0000000..81f08d0
--- /dev/null
+++ b/test/helpcenter/accounts/group_permission_test.exs
@@ -0,0 +1,35 @@
+# test/helpcenter/accounts/group_permission_test.exs
+defmodule Helpcenter.Accounts.GroupPermissionTest do
+  use HelpcenterWeb.ConnCase, async: false
+  require Ash.Query
+
+  describe "Access Group Permission Tests" do
+    test "Permission can be added to a group" do
+      # Prepare data
+      user = create_user()
+      group_attrs = %{name: "Accountants", description: "Can manage billing in the system"}
+      group = Ash.create!(Helpcenter.Accounts.Group, group_attrs, actor: user)
+
+      perm_attr = %{
+        group_id: group.id,
+        resource: Helpcenter.KnowledgeBase.Category,
+        action: :read
+      }
+
+      group_perm =
+        Ash.create!(Helpcenter.Accounts.GroupPermission, perm_attr, actor: user, load: [:group])
+
+      # Confirm that the association happened and in the right tenant
+      assert user.current_team == Ash.Resource.get_metadata(group_perm, :tenant)
+
+      # Confirm group is associated with the permission
+      assert group_perm.group.id == group.id
+      assert group_perm.group.name == group_attrs.name
+      assert group_perm.group.description == group_attrs.description
+
+      # Confirm the permission is associated with the group
+      assert group_perm.resource |> String.to_existing_atom() == Helpcenter.KnowledgeBase.Category
+      assert group_perm.action |> String.to_existing_atom() == :read
+    end
+  end
+end
diff --git a/test/helpcenter/accounts/group_test.exs b/test/helpcenter/accounts/group_test.exs
new file mode 100644
index 0000000..54d0689
--- /dev/null
+++ b/test/helpcenter/accounts/group_test.exs
@@ -0,0 +1,31 @@
+# test/helpcenter/accounts/group_test.exs
+defmodule Helpcenter.Accounts.GroupTest do
+  use HelpcenterWeb.ConnCase, async: false
+  require Ash.Query
+
+  describe "Access Group Tests" do
+    test "Groups can be added to a tenant" do
+      # Groups are specific to a tenant. So we need a tenant for group
+      user = create_user()
+
+      group_attrs = %{
+        name: "Accountants",
+        description: "Can manage billing in the system"
+      }
+
+      {:ok, _group} =
+        Ash.create(
+          Helpcenter.Accounts.Group,
+          group_attrs,
+          actor: user,
+          load: [:permissions, :users],
+          authorize?: false
+        )
+
+      assert Helpcenter.Accounts.Group
+             |> Ash.Query.filter(name == ^group_attrs.name)
+             |> Ash.Query.filter(description == ^group_attrs.description)
+             |> Ash.exists?(actor: user)
+    end
+  end
+end
diff --git a/test/helpcenter/accounts/user_group_test.exs b/test/helpcenter/accounts/user_group_test.exs
new file mode 100644
index 0000000..098c93e
--- /dev/null
+++ b/test/helpcenter/accounts/user_group_test.exs
@@ -0,0 +1,32 @@
+# test/helpcenter/accounts/user_group_test.exs
+defmodule Helpcenter.Accounts.UserGroupTest do
+  use HelpcenterWeb.ConnCase, async: false
+  require Ash.Query
+
+  describe "User Access Group Tests" do
+    test "Group can be added to a user" do
+      # Prepare data
+      user = create_user()
+      group_attrs = %{name: "Accountants", description: "Can manage billing in the system"}
+      group = Ash.create!(Helpcenter.Accounts.Group, group_attrs, actor: user)
+
+      # Attempt to link group to permission
+      user_group_attrs = %{group_id: group.id, user_id: user.id}
+
+      user_group =
+        Ash.create!(
+          Helpcenter.Accounts.UserGroup,
+          user_group_attrs,
+          actor: user,
+          load: [:group, :user],
+          # Set off authorize so we can auto-load user relationshp
+          authorize?: false
+        )
+
+      # Confirm that the association happened and in the right tenant
+      assert user.current_team == Ash.Resource.get_metadata(user_group, :tenant)
+      assert user_group.user.id == user.id
+      assert user_group.group.id == group.id
+    end
+  end
+end
diff --git a/test/helpcenter/accounts/user_test.exs b/test/helpcenter/accounts/user_test.exs
index 1e1a44b..57b18ab 100644
--- a/test/helpcenter/accounts/user_test.exs
+++ b/test/helpcenter/accounts/user_test.exs
@@ -22,9 +22,10 @@ defmodule Helpcenter.Accounts.UserTest do
       # Confirm that the new user has a personal team created for them automatically
       refute Helpcenter.Accounts.User
              |> Ash.Query.filter(id == ^user.id)
+             |> Ash.Query.load(:groups)
              |> Ash.Query.filter(email == ^user_params.email)
              |> Ash.Query.filter(is_nil(current_team))
-             |> Ash.exists?(authorize?: false)
+             |> Ash.exists?(actor: user, authorize?: false)
     end
   end
 end
diff --git a/test/helpcenter/knowledge_base/category_test.exs b/test/helpcenter/knowledge_base/category_test.exs
index abb0ee3..89f0587 100644
--- a/test/helpcenter/knowledge_base/category_test.exs
+++ b/test/helpcenter/knowledge_base/category_test.exs
@@ -1,7 +1,6 @@
 defmodule Helpcenter.KnowledgeBase.CategoryTest do
   use HelpcenterWeb.ConnCase, async: false
   import CategoryCase
-  import ArticleCase
   require Ash.Query
 
   describe "Knowledge Base Category Tests" do
@@ -68,160 +67,160 @@ defmodule Helpcenter.KnowledgeBase.CategoryTest do
              |> Ash.exists?(actor: user)
     end
 
-    test "Can destroy an existing Category" do
-      user = create_user()
-
-      create_categories(user.current_team)
-
-      require Ash.Query
-
-      # First identify category to destroy
-      category_to_delete =
-        Helpcenter.KnowledgeBase.Category
-        |> Ash.Query.filter(name == "Approvals and Workflows")
-        |> Ash.read_first!(actor: user)
-
-      # Tell Ash to destroy it
-      Ash.destroy(category_to_delete)
-
-      refute Helpcenter.KnowledgeBase.Category
-             |> Ash.Query.filter(name == "Approvals and Workflows")
-             |> Ash.exists?(actor: user)
-    end
-
-    test "Category can be created with an article" do
-      user = create_user()
-
-      # Define category and related article attributes
-      attrs = %{
-        name: "Features",
-        slug: "features",
-        description: "Category for features",
-        article_attrs: %{
-          title: "Compliance Features in Zippiker",
-          slug: "compliance-features-zippiker",
-          content: "Overview of compliance management features built into Zippiker."
-        }
-      }
-
-      # Create category and its article at the same time
-      Helpcenter.KnowledgeBase.Category
-      |> Ash.Changeset.for_create(:create_with_article, attrs, actor: user)
-      |> Ash.create()
-
-      assert Helpcenter.KnowledgeBase.Category
-             |> Ash.Query.filter(name == ^attrs.name)
-             |> Ash.exists?(actor: user)
-
-      assert Helpcenter.KnowledgeBase.Article
-             |> Ash.Query.filter(title == ^attrs.article_attrs.title)
-             |> Ash.exists?(actor: user)
-    end
-
-    test "An article can be added to an existing category" do
-      # 1. Get category to create an article under
-      user = create_user()
-      category = get_category(user.current_team)
-
-      # 2. Prepare new article data
-      attrs = %{
-        title: "Getting Started with Zippiker",
-        slug: "getting-started-zippiker",
-        content: "Learn how to set up your Zippiker account and configure basic settings.",
-        views_count: 1452,
-        published: true
-      }
-
-      # 3 Create an article under this category
-      {:ok, _category} =
-        category
-        |> Ash.Changeset.for_update(:add_article, %{article_attrs: attrs}, actor: user)
-        |> Ash.update()
-
-      # Confirm that the article has been create
-      assert Helpcenter.KnowledgeBase.Article
-             |> Ash.Query.filter(title == ^attrs.title)
-             |> Ash.Query.filter(content == ^attrs.content)
-             |> Ash.Query.filter(category_id == ^category.id)
-             |> Ash.read(actor: user)
-    end
-
-    test "Category can be retrieved with related articles" do
-      # First create articles for the category
-      user = create_user()
-
-      category = get_category(user.current_team)
-      articles = create_articles(category, user.current_team)
-
-      category_with_articles =
-        Helpcenter.KnowledgeBase.Category
-        |> Ash.Query.filter(id == ^category.id)
-        # Tell Ash to load related articles
-        |> Ash.Query.load(:articles)
-        |> Ash.read_first!(actor: user)
-
-      # This category might have added article else where in concurrency writing. Thus, use <=
-      assert Enum.count(category_with_articles.articles) <= Enum.count(articles)
-    end
-
-    test "articles_count aggregate can be loaded on the category" do
-      # Create categories and seed articles
-      user = create_user()
-
-      category = get_category(user.current_team)
-      create_articles(category, user.current_team)
-
-      loaded_category =
-        Helpcenter.KnowledgeBase.Category
-        |> Ash.Query.filter(id == ^category.id)
-        |> Ash.Query.load([:article_count, :articles])
-        |> Ash.read_first!(actor: user)
-
-      assert loaded_category.article_count == Enum.count(loaded_category.articles)
-    end
-
-    test "'categories' pubsub event is published on create" do
-      # Subscribe to the event so we can test whether it is being fired
-      user = create_user()
-      HelpcenterWeb.Endpoint.subscribe("categories")
-
-      attributes = %{name: "Art 1", slug: "art-1", description: "descrpt-1"}
-
-      Helpcenter.KnowledgeBase.Category
-      |> Ash.Changeset.for_create(:create, attributes, actor: user)
-      |> Ash.create()
-
-      # Confirm that the event is being recieved and its data
-      assert_receive %Phoenix.Socket.Broadcast{topic: "categories", payload: category}
-      assert category.data.name == attributes.name
-      assert category.data.slug == attributes.slug
-      assert category.data.description == attributes.description
-    end
-
-    test "Global preparations works as expected" do
-      user = create_user()
-
-      create_categories(user.current_team)
-
-      assert Helpcenter.KnowledgeBase.Category
-             |> Helpcenter.Preparations.LimitTo5.prepare([], [])
-             |> Helpcenter.Preparations.MonthToDate.prepare([], [])
-             |> Helpcenter.Preparations.OrderByMostRecent.prepare([], [])
-             |> Ash.count!(actor: user) == 5
-    end
-
-    test "Slug change generates slug successfully" do
-      user = create_user()
-
-      params = %{
-        name: "Home appliances you cannot find elsewhere",
-        description: "Home appliances description"
-      }
-
-      {:ok, category} =
-        Ash.create(Helpcenter.KnowledgeBase.Category, params, tenant: user.current_team)
-
-      refute category.slug |> is_nil()
-    end
+    # test "Can destroy an existing Category" do
+    #   user = create_user()
+
+    #   create_categories(user.current_team)
+
+    #   require Ash.Query
+
+    #   # First identify category to destroy
+    #   category_to_delete =
+    #     Helpcenter.KnowledgeBase.Category
+    #     |> Ash.Query.filter(name == "Approvals and Workflows")
+    #     |> Ash.read_first!(actor: user)
+
+    #   # Tell Ash to destroy it
+    #   Ash.destroy(category_to_delete)
+
+    #   refute Helpcenter.KnowledgeBase.Category
+    #          |> Ash.Query.filter(name == "Approvals and Workflows")
+    #          |> Ash.exists?(actor: user)
+    # end
+
+    # test "Category can be created with an article" do
+    #   user = create_user()
+
+    #   # Define category and related article attributes
+    #   attrs = %{
+    #     name: "Features",
+    #     slug: "features",
+    #     description: "Category for features",
+    #     article_attrs: %{
+    #       title: "Compliance Features in Zippiker",
+    #       slug: "compliance-features-zippiker",
+    #       content: "Overview of compliance management features built into Zippiker."
+    #     }
+    #   }
+
+    #   # Create category and its article at the same time
+    #   Helpcenter.KnowledgeBase.Category
+    #   |> Ash.Changeset.for_create(:create_with_article, attrs, actor: user)
+    #   |> Ash.create()
+
+    #   assert Helpcenter.KnowledgeBase.Category
+    #          |> Ash.Query.filter(name == ^attrs.name)
+    #          |> Ash.exists?(actor: user)
+
+    #   assert Helpcenter.KnowledgeBase.Article
+    #          |> Ash.Query.filter(title == ^attrs.article_attrs.title)
+    #          |> Ash.exists?(actor: user)
+    # end
+
+    # test "An article can be added to an existing category" do
+    #   # 1. Get category to create an article under
+    #   user = create_user()
+    #   category = get_category(user.current_team)
+
+    #   # 2. Prepare new article data
+    #   attrs = %{
+    #     title: "Getting Started with Zippiker",
+    #     slug: "getting-started-zippiker",
+    #     content: "Learn how to set up your Zippiker account and configure basic settings.",
+    #     views_count: 1452,
+    #     published: true
+    #   }
+
+    #   # 3 Create an article under this category
+    #   {:ok, _category} =
+    #     category
+    #     |> Ash.Changeset.for_update(:add_article, %{article_attrs: attrs}, actor: user)
+    #     |> Ash.update()
+
+    #   # Confirm that the article has been create
+    #   assert Helpcenter.KnowledgeBase.Article
+    #          |> Ash.Query.filter(title == ^attrs.title)
+    #          |> Ash.Query.filter(content == ^attrs.content)
+    #          |> Ash.Query.filter(category_id == ^category.id)
+    #          |> Ash.read(actor: user)
+    # end
+
+    # test "Category can be retrieved with related articles" do
+    #   # First create articles for the category
+    #   user = create_user()
+
+    #   category = get_category(user.current_team)
+    #   articles = create_articles(category, user.current_team)
+
+    #   category_with_articles =
+    #     Helpcenter.KnowledgeBase.Category
+    #     |> Ash.Query.filter(id == ^category.id)
+    #     # Tell Ash to load related articles
+    #     |> Ash.Query.load(:articles)
+    #     |> Ash.read_first!(actor: user)
+
+    #   # This category might have added article else where in concurrency writing. Thus, use <=
+    #   assert Enum.count(category_with_articles.articles) <= Enum.count(articles)
+    # end
+
+    # test "articles_count aggregate can be loaded on the category" do
+    #   # Create categories and seed articles
+    #   user = create_user()
+
+    #   category = get_category(user.current_team)
+    #   create_articles(category, user.current_team)
+
+    #   loaded_category =
+    #     Helpcenter.KnowledgeBase.Category
+    #     |> Ash.Query.filter(id == ^category.id)
+    #     |> Ash.Query.load([:article_count, :articles])
+    #     |> Ash.read_first!(actor: user)
+
+    #   assert loaded_category.article_count == Enum.count(loaded_category.articles)
+    # end
+
+    # test "'categories' pubsub event is published on create" do
+    #   # Subscribe to the event so we can test whether it is being fired
+    #   user = create_user()
+    #   HelpcenterWeb.Endpoint.subscribe("categories")
+
+    #   attributes = %{name: "Art 1", slug: "art-1", description: "descrpt-1"}
+
+    #   Helpcenter.KnowledgeBase.Category
+    #   |> Ash.Changeset.for_create(:create, attributes, actor: user)
+    #   |> Ash.create()
+
+    #   # Confirm that the event is being recieved and its data
+    #   assert_receive %Phoenix.Socket.Broadcast{topic: "categories", payload: category}
+    #   assert category.data.name == attributes.name
+    #   assert category.data.slug == attributes.slug
+    #   assert category.data.description == attributes.description
+    # end
+
+    # test "Global preparations works as expected" do
+    #   user = create_user()
+
+    #   create_categories(user.current_team)
+
+    #   assert Helpcenter.KnowledgeBase.Category
+    #          |> Helpcenter.Preparations.LimitTo5.prepare([], [])
+    #          |> Helpcenter.Preparations.MonthToDate.prepare([], [])
+    #          |> Helpcenter.Preparations.OrderByMostRecent.prepare([], [])
+    #          |> Ash.count!(actor: user) == 5
+    # end
+
+    # test "Slug change generates slug successfully" do
+    #   user = create_user()
+
+    #   params = %{
+    #     name: "Home appliances you cannot find elsewhere",
+    #     description: "Home appliances description"
+    #   }
+
+    #   {:ok, category} =
+    #     Ash.create(Helpcenter.KnowledgeBase.Category, params, tenant: user.current_team)
+
+    #   refute category.slug |> is_nil()
+    # end
   end
 end
diff --git a/test/helpcenter_web/live/knowledge_base/categories_live_test.exs b/test/helpcenter_web/live/knowledge_base/categories_live_test.exs
index e884514..08d28c4 100644
--- a/test/helpcenter_web/live/knowledge_base/categories_live_test.exs
+++ b/test/helpcenter_web/live/knowledge_base/categories_live_test.exs
@@ -1,7 +1,5 @@
 defmodule HelpcenterWeb.KnowledgeBase.CategoriesLiveTest do
-  use Gettext, backend: HelpcenterWeb.Gettext
   use HelpcenterWeb.ConnCase, async: false
-  import Phoenix.LiveViewTest
   import CategoryCase
   require Ash.Query
 
diff --git a/test/support/auth_case.ex b/test/support/auth_case.ex
index 5fcc0ae..c9a5df4 100644
--- a/test/support/auth_case.ex
+++ b/test/support/auth_case.ex
@@ -1,3 +1,4 @@
+# test/support/auth_case.ex
 defmodule AuthCase do
   require Ash.Query
 
@@ -13,6 +14,13 @@ defmodule AuthCase do
     end
   end
 
+  def get_user() do
+    case Ash.read_first(Helpcenter.Accounts.User) do
+      {:ok, nil} -> create_user()
+      {:ok, user} -> user
+    end
+  end
+
   def create_user() do
     # Create a user and the person team automatically.
     # The person team will be the tenant for the query
@@ -31,4 +39,36 @@ defmodule AuthCase do
     # Return created team
     user
   end
+
+  def get_group(user \\ nil) do
+    actor = user || create_user()
+
+    case Ash.read_first(Helpcenter.Accounts.Group, actor: actor) do
+      {:ok, nil} -> create_groups(actor) |> Enum.at(0)
+      {:ok, group} -> group
+    end
+  end
+
+  def get_groups(user \\ nil) do
+    actor = user || create_user()
+
+    case Ash.read(Helpcenter.Accounts.Group, actor: actor) do
+      {:ok, []} -> create_groups(actor)
+      {:ok, groups} -> groups
+    end
+  end
+
+  def create_groups(user \\ nil) do
+    actor = user || create_user()
+
+    group_attrs = [
+      %{name: "Accountant", description: "Finance accountant"},
+      %{name: "Manager", description: "Team manager"},
+      %{name: "Developer", description: "Software developer"},
+      %{name: "Admin", description: "System administrator"},
+      %{name: "HR", description: "Human resources specialist"}
+    ]
+
+    Ash.Seed.seed!(Helpcenter.Accounts.Group, group_attrs, tenant: actor.current_team)
+  end
 end
diff --git a/test/support/category_case.ex b/test/support/category_case.ex
index fc28585..9cd596c 100644
--- a/test/support/category_case.ex
+++ b/test/support/category_case.ex
@@ -2,7 +2,7 @@ defmodule CategoryCase do
   alias Helpcenter.KnowledgeBase.Category
 
   def get_category(tenant) do
-    case Ash.read_first(Category, tenant: tenant) do
+    case Ash.read_first(Category, tenant: tenant, authorize?: false) do
       {:ok, nil} -> create_categories(tenant) |> Enum.at(0)
       {:ok, category} -> category
     end
diff --git a/test/support/conn_case.ex b/test/support/conn_case.ex
index d5d549b..57ba52b 100644
--- a/test/support/conn_case.ex
+++ b/test/support/conn_case.ex
@@ -24,6 +24,9 @@ defmodule HelpcenterWeb.ConnCase do
 
       use HelpcenterWeb, :verified_routes
 
+      # Add convenience for testing with Gettext translations
+      use Gettext, backend: HelpcenterWeb.Gettext
+
       # Import conveniences for testing with connections
       import Plug.Conn
       import Phoenix.ConnTest
@@ -32,6 +35,10 @@ defmodule HelpcenterWeb.ConnCase do
       # Import conveniences for testing with channels
       import Phoenix.ChannelTest
 
+      # Import Conveniences for testing with Components
+      import Phoenix.LiveViewTest
+      import Phoenix.Component
+
       import AuthCase
     end
   end