Access scope has three levels in Noumena. What are they, and what distinguishes them?

Individual record, Group of records, and Global — three widening levels of which data a user can reach.

Access scope answers "who can view and interact with which data / protocols". Using a customer-relationship example with a Key Account Manager (KAM):

1. Individual record — the narrowest: a KAM enters a draft prospect, and only that KAM can see it. (No separate modelling needed — the user's own id identifies it.)
2. Group of records — a KAM can access a defined set: named large clients, or all clients in their region or subscription tier. This is the most common real-world choice, assigned via user attributes or, better, IAM groups.
3. Global — an edge case: a user (e.g. a global account manager) sees all records. Sometimes needed for compliance or operations, but it is an open door to violating least privilege — so a global scope should be paired with an extremely narrow functional right (e.g. read-only) to counterweigh its reach.