piper supports multi-tenant scenarios where a monitoring site may be shared across organizations — for example, a site owner and their environmental consultant may both need access to the same site's data. A TenantSiteAccess record controls this by linking a tenantId to a siteId with an accessLevel (a TenantSiteAccessLevel enum). The grantedBy field records which administrator authorized the access grant, providing accountability for who expanded site visibility beyond the primary owner.
Technical section
Data model, API, and internals — visible to developers.