n8n/packages/cli/src/permissions/roles.ts

import type { Scope } from '@n8n/permissions';

export const ownerPermissions: Scope[] = [
	'workflow:create',
	'workflow:read',
	'workflow:update',
	'workflow:delete',
	'workflow:list',
	'workflow:share',
	'tag:create',
	'tag:read',
	'tag:update',
	'tag:delete',
	'tag:list',
	'user:create',
	'user:read',
	'user:update',
	'user:delete',
	'user:list',
	'user:resetPassword',
	'credential:create',
	'credential:read',
	'credential:update',
	'credential:delete',
	'credential:list',
	'credential:share',
	'variable:create',
	'variable:read',
	'variable:update',
	'variable:delete',
	'variable:list',
	'sourceControl:pull',
	'sourceControl:push',
	'sourceControl:manage',
	'externalSecretsProvider:create',
	'externalSecretsProvider:read',
	'externalSecretsProvider:update',
	'externalSecretsProvider:delete',
	'externalSecretsProvider:list',
	'externalSecretsProvider:sync',
	'externalSecret:list',
	'orchestration:read',
	'orchestration:list',
	'communityPackage:install',
	'communityPackage:uninstall',
	'communityPackage:update',
	'communityPackage:list',
	'ldap:manage',
	'ldap:sync',
	'saml:manage',
	'eventBusEvent:create',
	'eventBusEvent:read',
	'eventBusEvent:update',
	'eventBusEvent:delete',
	'eventBusEvent:list',
	'eventBusEvent:query',
	'eventBusEvent:create',
	'eventBusDestination:create',
	'eventBusDestination:read',
	'eventBusDestination:update',
	'eventBusDestination:delete',
	'eventBusDestination:list',
	'eventBusDestination:test',
];
export const adminPermissions: Scope[] = ownerPermissions.concat();
export const memberPermissions: Scope[] = [
	'user:list',
	'variable:list',
	'variable:read',
	'tag:create',
	'tag:read',
	'tag:update',
	'tag:list',
	'eventBusEvent:list',
	'eventBusEvent:read',
	'eventBusDestination:list',
	'eventBusDestination:test',
];