How do you design permissions for a multi-tenant SaaS product?

I’ve been thinking a lot recently while working on migrating the Role and Permission System of our...