Returns the calling user's effective role on the Application.

Resolves the explicit collaborator grant, tenant-admin status, and the legacy per-agent grants that are still promoted Application-wide. `role` is null when the caller has no access; the `canView` / `canEdit` / `canManage` flags project that role onto the permission ladder so clients do not reimplement it — in particular, `canManage` is the correct gate for the collaborator admin UI, which the API enforces as Application Admin rather than a tenant-wide scope. Deliberately **not** 403 on denial — "you have no access" is an answer this endpoint has to be able to give, so an Application the caller cannot reach is a 200 with a null role. Only an Application that does not exist is a 404.

curl -X GET "https://api.fruxon.com/v1/tenants/string/networks/497f6eca-6276-4993-bfeb-53cbbbba6f08/access"

{
  "role": "VIEWER",
  "canView": false,
  "canEdit": false,
  "canManage": false,
  "applicationId": "00000000-0000-0000-0000-000000000000",
  "requestPending": false
}

{
  "type": "string",
  "title": "string",
  "status": 0,
  "detail": "string",
  "instance": "string",
  "property1": null,
  "property2": null
}