Services with non-default workspace scopes: https://docs.google.com/document/d/1hB-D8Rj_JvJ3Le3TdPULZyCPhahbkY4wacu-kID8pCQ/edit?tab=t.0

Understand how the teams are going the check the new permissions, e.g., advisor https://github.com/RedHatInsights/rbac-config/blob/master/configs/stage/schemas/src/advisor.ksl#L17-L19
They don't need to check multiple permissions because it is unified in the kessel schema
https://redhat-internal.slack.com/archives/C0233N2MBU6/p1764101566831579

Are the teams specifying the correct scope?