Role default + user override with OR rules; covers customers, leads, sales, activities, notes, routines, projects, and tickets.
Co-authored-by: Cursor <cursoragent@cursor.com>