Problem: In a full-copy sandbox, Apsona gives every user full access regardless of the production license/permission setup — so admins can't validate the real end-user experience (Builder vs. Viewer, Doc Gen, profile restrictions) before deploying. The only workaround is a complex manual sharing-rule config that's wiped by every sandbox refresh.
Request: Replicate the same license & permission behavior in sandbox as in production — one-step/built-in, enforced identically (access levels, entitlements, export/button/page restrictions), and persisting across sandbox refreshes.
Acceptance: A View-only user in sandbox behaves exactly as in prod (e.g., can't run merges without Doc Gen, can't create merge actions); setup survives a refresh with no manual re-work — so orgs can test everything in sandbox and move to prod with confidence.