Permission catalog

The 34 permission subjects a module can request, with the roles each action is granted to — rendered from the permissions.snapshot.json the SDK ships (v1.11.0).

Your manifest requests them as "<subject>:<action>" entries under permissions, each with a reason the approving admin reads — see the manifest reference.

Reserved prefixes — only first-party modules may claim subjects under: building., platform., telemetry., cafm., compliance., sustainability.. Platform administrators bypass these grants entirely.

Subject	Action	Granted to
building.buildings	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops, front-desk
	write	manager, building-graph-writer
building.changesets	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner
	write	manager
building.collections	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner
	write	manager
building.elements	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops, front-desk
	write	manager, building-graph-writer
building.faults	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner
	write	manager, technician, dispatcher
building.layers	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops
	write	manager, building-graph-writer
building.models	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer
	write	manager, building-graph-writer
building.payments	read	user, manager, admin, tenant
	write	manager, admin
building.sites	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops, front-desk
	write	manager, building-graph-writer
building.spaces	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops, front-desk
	write	manager, building-graph-writer
building.storeys	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, building-graph-writer, compliance-officer, event-ops, front-desk
	write	manager, building-graph-writer
cafm.permit-zones	read	user, manager, admin, technician, dispatcher, security, compliance-officer, event-ops
	write	compliance-officer, admin
cafm.permits	read	user, manager, admin, technician, dispatcher, security, compliance-officer, event-ops
cafm.pm	read	manager, admin, technician, dispatcher
	write	manager, admin, dispatcher
cafm.workorders	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, compliance-officer, event-ops
	write	manager, event-ops
compliance.reports	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, compliance-officer
	write	manager
data-import.sync	read	admin, manager, accountant
	write	admin, manager, accountant
directory.teams	read	user, manager, admin, technician, dispatcher, security
directory.vendors	read	manager, admin, dispatcher
engagement.events	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, event-ops, front-desk
	write	manager, marketeer, tenant, event-ops
engagement.loyalty	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner
	write	manager, marketeer, tenant, user
engagement.promotions	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner
	write	manager, marketeer, tenant
nav-events	write	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, compliance-officer, event-ops, front-desk
notifications	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner
platform.catalog	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner
platform.licenses	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner
	write
platform.organizations	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner
	write
platform.pricing	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner
	write
platform.registry	write
platform.status	read	admin, manager
platform.webhooks	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner
	write	manager
service-desk.tickets	read	manager, admin, technician, dispatcher, security, tenant, user, front-desk, event-ops
	write	manager, admin, technician, dispatcher, tenant, front-desk, event-ops
sustainability.emissions	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner, compliance-officer
	write	manager
telemetry.points	read	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner
	subscribe	user, manager, marketeer, admin, technician, tenant, security, dispatcher, accountant, owner
	write	manager