Audit + Security

Permissions

[
  {
    "code": "ACCOUNT_READ",
    "name": "Read accounts",
    "description": "View chart of accounts.",
    "category": "accounting"
  },
  {
    "code": "ACCOUNT_MANAGE",
    "name": "Manage accounts",
    "description": "Create and update chart of accounts.",
    "category": "accounting"
  },
  {
    "code": "JOURNAL_READ",
    "name": "Read journals",
    "description": "View journal entries.",
    "category": "accounting"
  },
  {
    "code": "JOURNAL_CREATE",
    "name": "Create journals",
    "description": "Create draft journal entries.",
    "category": "accounting"
  },
  {
    "code": "JOURNAL_POST",
    "name": "Post journals",
    "description": "Post balanced journals into the ledger.",
    "category": "accounting"
  },
  {
    "code": "LEDGER_READ",
    "name": "Read ledger",
    "description": "View general ledger entries.",
    "category": "accounting"
  },
  {
    "code": "AUDIT_READ",
    "name": "Read audit logs",
    "description": "View immutable audit activity.",
    "category": "audit"
  },
  {
    "code": "BANKING_READ",
    "name": "Read banking",
    "description": "Read banking",
    "category": "banking"
  },
  {
    "code": "BANKING_MANAGE",
    "name": "Manage banking",
    "description": "Manage banking",
    "category": "banking"
  },
  {
    "code": "GST_READ",
    "name": "Read GST",
    "description": "View GST returns and analytics.",
    "category": "gst"
  },
  {
    "code": "GST_MANAGE",
    "name": "Manage GST",
    "description": "Create, lock, and file GST return periods.",
    "category": "gst"
  },
  {
    "code": "USER_READ",
    "name": "Read users",
    "description": "View users and memberships.",
    "category": "identity"
  },
  {
    "code": "USER_CREATE",
    "name": "Create users",
    "description": "Invite or create organization users.",
    "category": "identity"
  },
  {
    "code": "USER_UPDATE",
    "name": "Update users",
    "description": "Update user profile, status, and membership details.",
    "category": "identity"
  },
  {
    "code": "USER_DISABLE",
    "name": "Disable users",
    "description": "Suspend user access to an organization.",
    "category": "identity"
  },
  {
    "code": "INVITATION_READ",
    "name": "Read user invitations",
    "description": "Read user invitations",
    "category": "identity"
  },
  {
    "code": "INVITATION_CREATE",
    "name": "Create user invitations",
    "description": "Create user invitations",
    "category": "identity"
  },
  {
    "code": "INVITATION_REVOKE",
    "name": "Revoke user invitations",
    "description": "Revoke user invitations",
    "category": "identity"
  },
  {
    "code": "TALLY_READ",
    "name": "Read Tally integration",
    "description": "Read Tally connections, mappings, sync runs, and reconciliation output",
    "category": "integration"
  },
  {
    "code": "TALLY_MANAGE",
    "name": "Manage Tally integration",
    "description": "Manage Tally connector configuration and execute Tally sync workflows",
    "category": "integration"
  },
  {
    "code": "INVOICE_READ",
    "name": "Read invoices",
    "description": "View invoice records.",
    "category": "invoicing"
  },
  {
    "code": "INVOICE_CREATE",
    "name": "Create invoices",
    "description": "Create draft invoices and invoice lines.",
    "category": "invoicing"
  },
  {
    "code": "INVOICE_ISSUE",
    "name": "Issue invoices",
    "description": "Issue invoices to customers.",
    "category": "invoicing"
  },
  {
    "code": "INVOICE_POST",
    "name": "Post invoices",
    "description": "Post invoices to accounting journals.",
    "category": "invoicing"
  },
  {
    "code": "ORGANIZATION_READ",
    "name": "Read organizations",
    "description": "View organization profile and settings.",
    "category": "organization"
  },
  {
    "code": "ORGANIZATION_UPDATE",
    "name": "Update organizations",
    "description": "Update organization profile and settings.",
    "category": "organization"
  },
  {
    "code": "BRANCH_READ",
    "name": "Read branches",
    "description": "Read branches",
    "category": "organization"
  },
  {
    "code": "BRANCH_MANAGE",
    "name": "Manage branches",
    "description": "Manage branches",
    "category": "organization"
  },
  {
    "code": "DEPARTMENT_READ",
    "name": "Read departments",
    "description": "Read departments",
    "category": "organization"
  },
  {
    "code": "DEPARTMENT_MANAGE",
    "name": "Manage departments",
    "description": "Manage departments",
    "category": "organization"
  },
  {
    "code": "QUEUE_READ",
    "name": "Read queues",
    "description": "Read queues",
    "category": "platform"
  },
  {
    "code": "EVENT_READ",
    "name": "Read domain events",
    "description": "Read domain events",
    "category": "platform"
  },
  {
    "code": "ROLE_READ",
    "name": "Read roles",
    "description": "View roles and permission assignments.",
    "category": "rbac"
  },
  {
    "code": "ROLE_MANAGE",
    "name": "Manage roles",
    "description": "Change role permission assignments and membership roles.",
    "category": "rbac"
  },
  {
    "code": "REPORT_READ",
    "name": "Read reports",
    "description": "View financial reports.",
    "category": "reporting"
  },
  {
    "code": "SECURITY_READ",
    "name": "Read security events",
    "description": "Read security events",
    "category": "security"
  },
  {
    "code": "SECURITY_MANAGE",
    "name": "Manage security events",
    "description": "Manage security events",
    "category": "security"
  }
]