Permission catalog
The 61 permission subjects a module can request, with the roles each action is granted to — rendered from the permissions.snapshot.json the SDK ships (v1.18.0).
Your manifest requests them as "<subject>:<action>" entries under permissions, each with a reason the approving admin reads — see the manifest reference.
Reserved prefixes — only first-party modules may claim subjects under: building., platform., telemetry., cafm., compliance., sustainability.. Platform administrators bypass these grants entirely.
| Subject | Action | Granted to |
|---|---|---|
access-control.devices | write | admin, manager, security |
access-control.gates | read | user, manager, admin, technician, dispatcher, security, accountant, owner, compliance-officer, front-desk, event-ops |
| write | admin, manager, security | |
access-control.passes | read | user, manager, admin, technician, dispatcher, security, accountant, owner, compliance-officer, front-desk, event-ops |
| write | admin, manager, security, front-desk | |
access-control.policies | read | user, manager, admin, technician, dispatcher, security, accountant, owner, compliance-officer, front-desk, event-ops |
| write | admin, manager, security | |
access-control.scans | read | user, manager, admin, technician, dispatcher, security, accountant, owner, compliance-officer, front-desk, event-ops |
| write | admin, manager, security, front-desk, dispatcher | |
attendance.policies | read | admin, manager, security, dispatcher, owner, compliance-officer |
| write | admin, manager | |
attendance.records | read | admin, manager, security, dispatcher, owner, compliance-officer |
attendance.scans | write | admin, manager, security |
attendance.shifts | read | admin, manager, security, dispatcher, owner, compliance-officer |
| write | admin, manager, security | |
attendance.staff | read | admin, manager, security, dispatcher, owner, compliance-officer |
| write | admin, manager, security | |
building.buildings | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops, front-desk |
| write | manager, building-graph-writer | |
building.changesets | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner |
| write | manager | |
building.collections | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner |
| write | manager | |
building.copies | read | manager |
| write | manager | |
building.elements | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops, front-desk |
| write | manager, building-graph-writer | |
building.faults | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner |
| write | manager, technician, dispatcher | |
building.layers | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops |
| write | manager, building-graph-writer | |
building.models | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer |
| write | manager, building-graph-writer | |
building.payments | read | user, manager, admin, tenant |
| write | manager, admin | |
building.sites | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops, front-desk |
| write | manager, building-graph-writer | |
building.spaces | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops, front-desk |
| write | manager, building-graph-writer | |
building.storeys | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops, front-desk |
| write | manager, building-graph-writer | |
cafm.permit-zones | read | user, manager, admin, technician, dispatcher, security, compliance-officer, event-ops |
| write | compliance-officer, admin | |
cafm.permits | read | user, manager, admin, technician, dispatcher, security, compliance-officer, event-ops |
cafm.pm | read | manager, admin, technician, dispatcher |
| write | manager, admin, dispatcher | |
cafm.workorders | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, compliance-officer, event-ops |
| write | manager, dispatcher, technician, event-ops | |
compliance.reports | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, compliance-officer |
| write | manager | |
copilot.llm-config | read | admin, manager, accountant, owner, compliance-officer |
| write | manager, admin | |
data-import.sync | read | admin, manager, accountant |
| write | admin, manager, accountant | |
directory.teams | read | user, manager, admin, technician, dispatcher, security |
directory.vendors | read | manager, admin, dispatcher |
engagement.events | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, event-ops, front-desk |
| write | manager, marketeer, tenant, event-ops | |
engagement.loyalty | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner |
| write | manager, marketeer, tenant, user | |
engagement.promotions | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner |
| write | manager, marketeer | |
equipment.assets | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, compliance-officer, event-ops, front-desk |
guard-patrol.alerts | write | admin, manager, security, dispatcher |
guard-patrol.config | write | admin, manager, security |
guard-patrol.patrols | read | user, manager, admin, dispatcher, security, owner, compliance-officer |
marketplace.directory | read | admin, manager, owner, accountant, marketplace-admin, marketplace-buyer |
| write | marketplace-admin | |
marketplace.rfqs | read | admin, manager, owner, accountant, marketplace-buyer |
| write | admin, manager, marketplace-buyer | |
multimedia.creatives | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, compliance-officer, event-ops, front-desk |
| write | admin, manager | |
multimedia.impressions | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, compliance-officer, event-ops, front-desk |
multimedia.screens | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, compliance-officer, event-ops, front-desk |
| write | admin, manager | |
multimedia.settings | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, compliance-officer, event-ops, front-desk |
nav-events | write | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, compliance-officer, event-ops, front-desk |
notifications | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner |
passport.identifiers | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops, front-desk |
| write | manager, building-graph-writer | |
passport.passports | publish | manager, admin |
| read | user, manager, marketeer, admin, technician, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops, front-desk | |
platform.audit | read | admin, manager |
platform.catalog | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner |
platform.licenses | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner |
| write | platform-admin only | |
platform.organizations | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner |
| write | platform-admin only | |
platform.pricing | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner |
| write | platform-admin only | |
platform.registry | write | platform-admin only |
platform.roles | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops, front-desk |
| write | admin | |
platform.status | read | platform-admin only |
platform.webhooks | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner |
| write | manager | |
service-desk.tickets | read | manager, admin, technician, dispatcher, security, tenant, user, front-desk, event-ops |
| write | manager, admin, technician, dispatcher, tenant, front-desk, event-ops | |
sustainability.emissions | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, compliance-officer |
| write | manager | |
telemetry.observations | write | admin, manager, technician |
telemetry.points | read | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner |
| subscribe | user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner | |
| write | manager |