/* Enterprise RBAC UI */
.rbac-role-grid {
  display: grid;
  grid-template-columns: repeat(auto-fill, minmax(200px, 1fr));
  gap: 10px;
}
.rbac-role-card {
  border: 1px solid var(--border, #e5e7eb);
  border-radius: 8px;
  padding: 10px 12px;
  background: #fff;
}
.rbac-role-head {
  display: flex;
  justify-content: space-between;
  align-items: center;
  font-weight: 700;
  font-size: 12px;
  margin-bottom: 6px;
}
.rbac-role-meta {
  font-size: 10px;
  color: var(--text-m, #6b7280);
  margin-bottom: 8px;
  line-height: 1.4;
}
.rbac-denied {
  opacity: 0.45;
  cursor: not-allowed !important;
}
.rbac-field-hidden {
  filter: blur(3px);
  user-select: none;
}
.inv-perm-status.on { /* shared with invoice designer */ }