Over the last year, Ramp’s internal systems have gone from a handful of role definitions to hundreds. What started as a clean, compact authorization model has shifted into a large‑scale role explosion. Each new feature, integration, and compliance rule seems to bring new roles, often overlapping or conflicting.