Security Explorer

Create principals, roles, and groups; GRANT/REVOKE against local AthenaDB or remote Server (Admin RPC) on the pilot surface.

The Classification tab reports Unavailable until a policy enumerate/read API exists — it does not pretend to manage labels yet.