Model access and context limits

Administrators manage tenant providers, models, defaults, and group model grants. Start with authorization and the model catalog.

The selected model/reasoning/context combination must fit one allowed grant tuple. Grants from different groups cannot combine into a larger tuple. Provider credentials require separate administrator permission and never appear in the public model list. A successful connection test does not grant access to users.

Tenant context limits and model limits both apply. A group's daily token quota controls consumption separately. It does not enlarge the model context window. Unknown price metadata does not mean free usage.

If no model is usable, check the active provider, active model, product-license enforcement, and group grant. Sorting uses its own tenant defaults. Keep those separate from the general chat default.