Platform permissions

Platform Permissions is the catalog of named capabilities that can be assigned to roles or directly to platform users. Every permission has a stable code that guards use to enforce access.

Overview

Platform Permissions list

Figure: The Permissions list showing code, name, resource, action, status, and row actions.

Key concepts

Code

Stable identifier generated as platform.<resource>.<action> (for example platform.subscribers.suspend). Shown in the list; not editable in the form, because guards reference it directly.

Resource

The platform entity the permission applies to — for example tenants, orders.

Action

The operation allowed — for example read, manage, impersonate.

Status

  • Active — enforced by guards; users with this permission get the access it describes.
  • Inactive — ignored by guards, even if it is still assigned to a role or user. Use this to retire a capability without deleting its history.

Add a permission

  1. Go to Access → Permissions in the sidebar.
  2. Click Add permission.
  3. Choose a Resource and one or more Actions. Each Action creates one permission with code platform.<resource>.<action>.
  4. Enter a Name when you select a single Action (required). With multiple Actions, Name is optional — each permission is named action resource, or your label (action) if you fill Name.
  5. Optionally add a Description and set Status to Active.
  6. Click Save.

Edit a permission

  1. In the permissions table, click the ⋮ menu on a row.
  2. Select Edit.
  3. Update Resource, Action (single), Name, Description, or Status. The Code stays the same after creation.
  4. Click Save.

Delete a permission

  1. Click ⋮ → Delete on the target row (or select several rows and use Delete selected).
  2. Confirm the deletion.

If the permission is assigned to roles or users you will see a notice — remove all assignments before deleting.

Export

Use the Export button to download the current list as CSV, Excel, or PDF, or copy it to the clipboard.

Access control

Only platform users with platform.permissions.read or a permissions mutation (create / update / delete) can view this page. Only users with a mutation permission can create, edit, or delete permissions.