Reference · Reference

Permissions

Role permissions and API key ceilings generated from the application's runtime access catalog.

This reference is generated from the same access catalog used by the application at runtime.

Ceilings limit grants

An API key ceiling is the maximum set of actions that type of key may receive. It does not grant those actions by itself, and an empty ceiling means that type of key cannot receive any project action.

Runtime intersection

A user API key receives only actions present in all three sets: its requested grant, the user API key ceiling, and its owner's active role permissions.

Organization and service API keys receive only actions present in both their requested grant and their corresponding ceiling. Runtime policy checks then evaluate that effective set.

Role access and API key ceilings

Each row comes from the configured action catalog. Checks show actions assigned to a role or allowed by an API key ceiling.

Role grants

Resource	Action	Owner	Admin	Support	Member
Activity`audit`	Read`read`	Allowed	Allowed	Not allowed	Not allowed
Courses`course`	Read`read`	Allowed	Allowed	Allowed	Allowed
Courses`course`	Create`create`	Allowed	Allowed	Not allowed	Allowed
Courses`course`	Update`update`	Allowed	Allowed	Not allowed	Allowed
Courses`course`	Delete`delete`	Allowed	Allowed	Not allowed	Allowed
Assets`asset`	Read`read`	Allowed	Allowed	Allowed	Allowed
Assets`asset`	Create`create`	Allowed	Allowed	Not allowed	Allowed
Assets`asset`	Update`update`	Allowed	Allowed	Not allowed	Allowed
Assets`asset`	Delete`delete`	Allowed	Allowed	Not allowed	Allowed
Translations`translation`	Read`read`	Allowed	Allowed	Allowed	Allowed
Translations`translation`	Update`update`	Allowed	Allowed	Not allowed	Allowed
Translations`translation`	Delete`delete`	Allowed	Allowed	Not allowed	Allowed
AI`ai`	Read`read`	Allowed	Allowed	Allowed	Allowed
AI`ai`	Use`use`	Allowed	Allowed	Not allowed	Allowed
AI`ai`	Cancel`cancel`	Allowed	Allowed	Not allowed	Allowed
Exports`export`	Read`read`	Allowed	Allowed	Allowed	Allowed
Exports`export`	Create`create`	Allowed	Allowed	Not allowed	Allowed
Exports`export`	Delete`delete`	Allowed	Allowed	Not allowed	Allowed
Organization`organization`	Read`read`	Allowed	Allowed	Allowed	Allowed
Organization`organization`	Manage`manage`	Allowed	Allowed	Not allowed	Not allowed

API-key assignable permissions

Resource	Action	User key	Organization key
Activity`audit`	Read`read`	Not allowed	Not allowed
Courses`course`	Read`read`	Allowed	Allowed
Courses`course`	Create`create`	Allowed	Allowed
Courses`course`	Update`update`	Allowed	Allowed
Courses`course`	Delete`delete`	Allowed	Allowed
Assets`asset`	Read`read`	Allowed	Allowed
Assets`asset`	Create`create`	Allowed	Allowed
Assets`asset`	Update`update`	Allowed	Allowed
Assets`asset`	Delete`delete`	Allowed	Allowed
Translations`translation`	Read`read`	Allowed	Allowed
Translations`translation`	Update`update`	Allowed	Allowed
Translations`translation`	Delete`delete`	Allowed	Allowed
AI`ai`	Read`read`	Allowed	Allowed
AI`ai`	Use`use`	Allowed	Allowed
AI`ai`	Cancel`cancel`	Allowed	Allowed
Exports`export`	Read`read`	Allowed	Allowed
Exports`export`	Create`create`	Allowed	Allowed
Exports`export`	Delete`delete`	Allowed	Allowed
Organization`organization`	Read`read`	Allowed	Allowed
Organization`organization`	Manage`manage`	Allowed	Not allowed