I suggest that in checking the roles you allow the use of wild card for example ROLE|* so that the role would apply in all organizations to avoid adding the organization/tenantId when we want to restrict menu items by role. So even if the role isn't created in the top level or root level we can still use it.
Components | JasperReports Server |