Permissions Reference

Reference for common user roles, statuses, and permission scopes

Permission Scope Model

Bud scopes generally follow resource:action with view and manage actions.

Common Global Scopes

Scope	Access Level	Typical Use
model:view	Read	Browse model inventory
model:manage	Write	Add/update model configurations
project:view	Read	Observe project state
project:manage	Write	Create/edit project resources
cluster:view	Read	Inspect cluster health and metadata
cluster:manage	Write	Operate cluster configuration
benchmark:view	Read	View benchmark runs
benchmark:manage	Write	Configure and run benchmarks
user:view	Read	View user records
user:manage	Write	Invite/edit/deactivate users

Roles and Statuses

Roles

• super_admin
• admin
• developer
• devops
• tester
• user

User Status Values

• active
• invited
• deleted

Usage Notes

• Prefer explicit scope assignment over broad role assumptions.
• Use project scopes to limit blast radius.
• Pair this reference with periodic review workflows.