Scopes
Read / write / admin op classes and presets.
Op classes
- read: list, get, query, find, unique_values, grid, catalog, get_progress, list_runs, list_errors, deliveries, bindings, shopify_status
- write: author, create, publish, refresh, edit, import, sync, flush, invite, generate.*, cancel
- admin: set_workspace_access, remove_member, create workspace, manage keys
Presets
| Preset | orgRole | workspaces.role | Typical modules |
|---|---|---|---|
org_admin | admin | admin on * | all including keys |
workspace_admin | none | admin on listed ids | all except org invite/keys |
workspace_member | none | member | read + generate + refresh + cell edit |
workspace_viewer | none | viewer | *.read only |
resource_writer | none | member | write/generate only listed resources |
generate_only | none | member | generate.* + skills.read + resources.get |
Intersection: key cannot grant foreign workspaces. Publishable keys cannot include write-admin ops.