SaaS platform access control flowchart

flowchart TD
    A[SaaS Platform] --> B[Client Organization 1]
    A --> C[Client Organization 2]
    A --> D[Client Organization n]

    B --> E[End-User 1.1]
    B --> F[End-User 1.2]
    C --> G[End-User 2.1]
    C --> H[End-User 2.2]
    D --> I[End-User n.1]
    D --> J[End-User n.2]

    K[Roles] --> L[Admin]
    K --> M[Manager]
    K --> N[Support Staff]
    K --> O[Analyst]

    P[Services] --> Q[BI Dashboard]
    P --> R[Support Chatbot]
    P --> S[Order Management]

    B -.->|has access to| Q
    B -.->|has access to| R
    C -.->|has access to| R
    C -.->|has access to| S
    D -.->|has access to| Q
    D -.->|has access to| S

    E --> |has| K
    F --> |has| K
    G --> |has| K
    H --> |has| K
    I --> |has| K
    J --> |has| K

    L --> |access based on org| P
    M --> |access based on org| P
    N --> |access based on org| P
    O --> |access based on org| P

    subgraph "Fine-Grained Access Control"
        T[User Authentication]
        U[Role Check]
        V[Organization Service Access Check]
        W[Service-Specific Permissions]
    end

    T --> U
    U --> V
    V --> W

    X[User Onboarding & Client Registration Service]
    Y[Session Management Service]

    X -.->|interacts with| A
    Y -.->|manages sessions for| A