角色和权限

每个屏幕页面仅命名一个操作所需的权限（D-8）——这是唯一说明哪些角色拥有该权限的页面，从控制平面强制执行的同一授权中读取。

{"permission": "admin", "grantedTo": null, "grantedOnlyByWildcard": true}

Validated against - · api/schema/permission-vocabulary.generated.json

Generated from Permission. Hand edits to this table are overwritten on the next build — change the Go doc comment, or the generator.

权限	角色
`admin`	（仅限通配符——由 `admin` 到 `` 持有）
`admin:manage`	（仅限通配符——由 `admin` 到 `` 持有）
`admin:read`	（仅限通配符——由 `admin` 到 `` 持有）
`audit:read`	（仅限通配符——由 `admin` 到 `` 持有）
`backups:create`	`operator`
`backups:delete`	`operator`
`backups:read`	`developer`, `operator`, `readonly`, `support`
`backups:restore`	`operator`
`canary:manage`	`operator`
`canary:read`	`developer`, `operator`, `readonly`, `support`
`config:read`	`developer`, `operator`, `readonly`, `support`
`config:write`	（仅限通配符——由 `admin` 到 `` 持有）
`containers:exec`	`operator`
`containers:logs`	`developer`, `operator`, `support`
`containers:manage`	`operator`
`containers:read`	`developer`, `operator`, `readonly`, `support`
`cronjobs:create`	`operator`
`cronjobs:delete`	`operator`
`cronjobs:read`	`developer`, `operator`, `readonly`, `support`
`cronjobs:update`	`operator`
`dashboards:manage`	`developer`, `operator`
`dashboards:read`	`developer`, `operator`, `readonly`, `support`
`debug:access`	`operator`
`deployments:create`	`developer`
`deployments:delete`	`developer`
`deployments:manage`	`operator`
`deployments:read`	`developer`, `operator`, `readonly`, `support`
`deployments:restart`	`operator`
`deployments:rollback`	`operator`
`deployments:scale`	`operator`
`deployments:start`	（仅限通配符——由 `admin` 到 `` 持有）
`deployments:stop`	（仅限通配符——由 `admin` 到 `` 持有）
`deployments:update`	`developer`, `operator`
`events:read`	`developer`, `operator`, `readonly`, `support`
`images:read`	`developer`, `operator`, `readonly`, `support`
`jobs:create`	`operator`
`jobs:delete`	`operator`
`jobs:read`	`developer`, `operator`, `readonly`, `support`
`jobs:run`	`operator`
`jobs:update`	`operator`
`networks:manage`	`operator`
`networks:read`	`developer`, `operator`, `readonly`, `support`
`nodes:manage`	`operator`
`nodes:read`	`developer`, `operator`, `readonly`, `support`
`reports:manage`	`operator`
`reports:read`	`developer`, `operator`, `readonly`, `support`
`scaling:configure`	`operator`
`scaling:read`	`developer`, `operator`, `readonly`, `support`
`scanner:manage`	`operator`
`scanner:read`	`operator`, `support`
`scanner:scan`	`operator`
`scanner:upgrade`	`operator`
`sre:approve`	`operator`
`sre:broadcast`	`operator`
`sre:configure`	`operator`
`sre:read`	`developer`, `operator`, `readonly`, `support`
`sre:trigger`	`operator`
`vault:manage`	`developer`
`vault:read`	`developer`
`volumes:manage`	`operator`
`volumes:read`	`developer`, `operator`, `readonly`, `support`