Permissions Reference - Bud Stack Documentation

Permission Scope Model

Bud scopes generally follow resource:action with view and manage actions.

Common Global Scopes

Scope	Access Level	Typical Use
`model:view`	Read	Browse model inventory
`model:manage`	Write	Add/update model configurations
`project:view`	Read	Observe project state
`project:manage`	Write	Create/edit project resources
`cluster:view`	Read	Inspect cluster health and metadata
`cluster:manage`	Write	Operate cluster configuration
`benchmark:view`	Read	View benchmark runs
`benchmark:manage`	Write	Configure and run benchmarks
`user:view`	Read	View user records
`user:manage`	Write	Invite/edit/deactivate users

Roles and Statuses

Roles

super_admin
admin
developer
devops
tester
user

User Status Values

active
invited
deleted

Usage Notes

Prefer explicit scope assignment over broad role assumptions.
Use project scopes to limit blast radius.
Pair this reference with periodic review workflows.