sam-api/app/Models/User.php

<?php

namespace App\Models;

use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Laravel\Fortify\TwoFactorAuthenticatable;
use Laravel\Sanctum\HasApiTokens;

class User extends Authenticatable
{
    use HasApiTokens, Notifiable, TwoFactorAuthenticatable, SoftDeletes;

    public function userTenants()
    {
        return $this->hasMany(UserTenant::class);
    }

    public function tenants()
    {
        return $this->belongsToMany(Tenant::class, 'user_tenants');
    }

    public function userRoles()
    {
        return $this->hasMany(UserRole::class);
    }

    public function roles()
    {
        return $this->belongsToMany(Role::class, 'user_roles')
            ->withPivot('tenant_id', 'assigned_at');
    }
}