We need some way to find out which teams, users or groups have access to different models as part of AISPM. This is so that we can ensure that:
- there is no misconfiguration
- only the authorized groups have access to specific models (which we can report on or flag if we find errors on)