During February 2025, this developer enhanced the broadinstitute/sam repository by implementing hierarchical role-based access control for custodias, focusing on scalable enterprise governance and secure data sharing. The work involved refactoring role definitions to establish a clear hierarchy, where steward roles inherit custodian permissions and custodians inherit snapshot_creator capabilities, thereby improving the granularity and manageability of access permissions. Using HOCON for configuration management, the developer introduced governance-friendly access controls that support future enhancements and facilitate auditing. Collaboration with cross-repository teams ensured the RBAC model aligned with the broader product roadmap, resulting in a robust foundation for secure access management.