Enum Permission 

#[non_exhaustive]
pub enum Permission {
    ViewServices,
    ApproveServices,
    RejectServices,
    RemoveServices,
    UpdateServices,
    ViewSystemServices,
    ApproveSystemServices,
    RejectSystemServices,
    RemoveSystemServices,
    UpdateSystemServices,
    ViewSoftware,
    CreateSoftware,
    UpdateSoftware,
    DeleteSoftware,
    TriggerChecks,
    TriggerUpdates,
    ManageScheduler,
    ViewHosts,
    UpdateHosts,
    DeactivateHosts,
    ViewSettings,
    ManageAuthSettings,
    ManageEnrollmentTokens,
    ManageAgentCerts,
    ManageGlobalSettings,
    ManageCommands,
    ViewNotifications,
    ManageNotifications,
    ViewAuditLogs,
    ViewSystemAuditLogs,
    ManageUsers,
    ManageIgnores,
    TestPluginConfigs,
    AccessMcp,
    ViewInstanceConfigState,
    ManageInstanceConfigState,
    Other(String),
}

An authorization permission.

Used in shared surface action descriptors (SurfaceActionDescriptor.permission) and web API auth middleware to gate access to actions and endpoints.

All variants serialize to / deserialize from snake_case strings. Unknown strings received on the wire are preserved as Permission::Other so that old binaries do not silently lose permissions added by newer builds.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

ViewServices

View tenant services and their status.

ApproveServices

Approve pending service enrollments.

RejectServices

Reject pending service enrollments.

RemoveServices

Deactivate/remove services.

UpdateServices

Update service settings (ping interval, freeze, merge).

ViewSystemServices

View system services (MQTT bridge, external scheduler).

ApproveSystemServices

Approve pending system services.

RejectSystemServices

Reject pending system services.

RemoveSystemServices

Deactivate system services.

UpdateSystemServices

Update system service settings.

ViewSoftware

View software items, plugin configs, history.

CreateSoftware

Create software items and plugin configs.

UpdateSoftware

Edit software items and plugin configs.

DeleteSoftware

Delete software items and plugin configs.

TriggerChecks

Trigger version checks and autodiscovery.

TriggerUpdates

Trigger update execution (single + batch).

ManageScheduler

Manage scheduled tasks.

ViewHosts

View hosts.

UpdateHosts

Update host properties and tags.

DeactivateHosts

Deactivate hosts.

ViewSettings

View all tenant settings (unified read).

ManageAuthSettings

Manage registration, authentication, OIDC providers.

ManageEnrollmentTokens

Manage tenant enrollment tokens.

ManageAgentCerts

Manage agent certificate settings.

ManageGlobalSettings

Manage global infrastructure settings.

ManageCommands

Controls the ability to modify command-bearing plugin config fields (shell commands, Docker post_pull_command, and custom hook commands arrays). Granting this permission is equivalent to granting effective code-execution authority on all managed hosts assigned to the affected software items. Assign with the same care as granting root access.

ViewNotifications

View notification channels, rules, log.

ManageNotifications

Create/modify notification channels and rules; SMTP settings.

ViewAuditLogs

View tenant-scoped audit log entries.

ViewSystemAuditLogs

View system-level audit log entries.

ManageUsers

Manage user roles and access.

ManageIgnores

Manage autodiscovery ignore rules.

TestPluginConfigs

Test plugin configurations against hosts (dry-run validation).

AccessMcp

Access the MCP server endpoint (/mcp).

Gate to the MCP endpoint. Tools enforce their own additional fine-grained permission checks (ViewSoftware, TriggerUpdates).

ViewInstanceConfigState

View the current config-reload coordinator state.

ManageInstanceConfigState

Manage (clear-degraded) the config-reload coordinator state.

Other(String)

An unknown permission received from a newer build.

Preserved on the wire instead of being dropped, so old binaries never silently lose permissions added in newer builds.

Implementations

impl Permission

pub fn all() -> Vec<Permission>

Returns all permission variants.

pub fn as_str(&self) -> &str

Returns the canonical snake_case string representation.

pub fn description(&self) -> &str

Returns a human-readable description of the permission.

Trait Implementations

impl Clone for Permission

fn clone(&self) -> Permission

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Permission

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Permission

fn deserialize<D>( deserializer: D, ) -> Result<Permission, <D as Deserializer<'de>>::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for Permission

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for Permission

impl From<String> for Permission

fn from(s: String) -> Permission

Converts to this type from the input type.

impl FromStr for Permission

type Err = Infallible

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Permission, <Permission as FromStr>::Err>

Parses a string s to return a value of this type.

impl Hash for Permission

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl IntoEnumIterator for Permission

type Iterator = PermissionIter

fn iter() -> PermissionIter

impl PartialEq for Permission

fn eq(&self, other: &Permission) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Permission

fn serialize<S>( &self, serializer: S, ) -> Result<<S as Serializer>::Ok, <S as Serializer>::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Permission