permissions in the catalogue
109
The permission catalogue as defined in code — read-only. Permissions are not created or renamed from the interface.
| Scopes | Roles that include it | |||||
|---|---|---|---|---|---|---|
| Users | user:view | View users | — | AllOwn dept.Depts. | Super adminAdminDepartment supervisor+1 | 6 |
| Users | user:create | Create users | — | AllOwn dept.Depts. | Super adminAdmin | 2 |
| Users | user:update | Update users | — | AllOwn dept.Depts. | Super adminAdmin | 2 |
| Users | user:delete | Delete users | — | AllOwn dept.Depts. | Super adminAdmin | 2 |
| Users | user:activate | Activate and deactivate usersNew | — | AllOwn dept.Depts. | Super adminAdmin | 2 |
| Users | user:assign-role | Assign rolesNew | Sensitive Its holder needs two-step verification, and a direct grant needs a reason. | AllOwn dept.Depts. | Super adminAdmin | 2 |
| Users | user:grant-permission | Direct grantsNew | Sensitive Its holder needs two-step verification, and a direct grant needs a reason. | AllOwn dept.Depts. | Super adminAdmin | 2 |
| Users | user:reset-mfa | Reset two-step verificationNew | Sensitive Its holder needs two-step verification, and a direct grant needs a reason. | All | Super admin | 1 |
| Roles | role:view | View roles | — | All | Super adminAdminAuditor | 3 |
| Roles | role:create | Create roles | Sensitive Its holder needs two-step verification, and a direct grant needs a reason. | All | Super adminAdmin | 2 |
| Roles | role:update | Update roles | Sensitive Its holder needs two-step verification, and a direct grant needs a reason. | All | Super adminAdmin | 2 |
| Roles | role:delete | Delete roles | Sensitive Its holder needs two-step verification, and a direct grant needs a reason. | All | Super adminAdmin | 2 |
| Roles | permission:view | View the permission catalogueNew | — | All | Super adminAdminAuditor+1 | 4 |
| Roles | access-review:manage | Access reviewsNew | — | All | Super adminAdminAuditor | 3 |
| Departments | department:view | View departments | — | AllOwn dept.Depts. | Super adminAdminModerator+5 | 29 |
| Departments | department:create | Create departments | — | All | Super adminAdmin | 2 |
| Departments | department:update | Update departments | — | All | Super adminAdmin | 2 |
| Departments | department:delete | Delete departments | — | All | Super adminAdmin | 2 |
| Projects | project:view | View projects | — | AllOwn dept.Depts. | Super adminAdminModerator+2 | 20 |
| Projects | project:create | Create projects | — | AllOwn dept.Depts. | Super adminAdmin | 2 |
| Projects | project:update | Update projects | — | AllOwn dept.Depts. | Super adminAdmin | 2 |
| Projects | project:delete | Delete projects | — | AllOwn dept.Depts. | Super adminAdmin | 2 |
| Experts | expert:view | View experts | — | AllOwn dept.Depts. | Super adminAdminModerator+6 | 37 |
| Experts | expert:create | Create experts | — | AllOwn dept.Depts. | Super adminAdminDepartment supervisor | 5 |
| Experts | expert:update | Update experts | — | AllOwn dept.Depts. | Super adminAdminDepartment supervisor | 5 |