Does it support multi-tenant SaaS with dynamic roles, hierarchical roles, and policies?

Hi Guys,
I have a Multi-tenant SaaS app which uses Keycloak for Identity management (including Dynamic Roles and Policies, which was a hell thing to do in Keycloak).
Soon, I will implement Fine-grained permissions, I wont be doing this on Keycloak, so I did a research and found Casbin.

I couldn't understand Casbin docs to check if it covers our app needs or not.
So here are the features I'm looking for:

1. A user will be linked to one or more roles
2. Roles are linked to a static list of Resources and Scopes (Casbin calls them Objects and Actions I guess)
3. Roles can be added dynamically
4. Support hierarchical roles (not necessarily)
5. Support multi-tenancy
6. Can fetch all roles in a specific tenant easily.
7. Can fetch all permissions (obj and act) that linked to a specific role easily.
8. Can fetch all Roles that linked to a specific user easily.

It would be great if anyone can give me examples or point out specific sections in the docs 🙏 .

I think Casdoor is what you need, see: https://casdoor.org/

It's also a full replacement of Keycloak

And it integrates with Casbin and supports multi-tenancy