Permission & RBAC Explorer

Toggle a role to light up exactly what it can do, or a permission to see who holds it. Matrix and graph views, filterable by scope.

Roles and permissions →

Driven by real source: server/src/modules/platform/rbac/domain/role-catalog.ts

Permission	OA	PM	ED	CRA	DM	MO	SM	SSM	AUD	PI	CRC	PH	STM	CDC	RM
Studies
`study.read`
`study.write`
`study.create`
`study.state.change`
`study.lock`
`study.archive`
Versioning
`study.version.read`
`study.amendment.start`
`study.version.submit_uat`
`study.uat.close_cycle`
`study.uat_issue.read`
`study.uat_issue.write`
`study.version.signoff`
`study.version.go_live`
`study.version.withdraw`
Sites
`site.read`
`site.write`
`site.activate`
`site.transition`
Subjects
`subject.read`
`subject.write`
`subject.delete`
`clinical.contact.write`
`clinical.consent.write`
`subject.eligibility`
Visits
`visit.read`
`visit.write`
Forms
`form.read`
`form.write`
`form.design`
`form.publish`
`form.freeze`
`form.write_dispensing`
Queries
`clinical.query.read`
`clinical.query.raise`
`clinical.query.answer`
`clinical.query.close`
`clinical.query.reopen`
Monitoring
`sdv.configure`
`sdv.perform`
Audit
`audit.read`
`audit.verify`
Exports
`export.read`
`export.run`
Admin
`rbac.manage`
`user.manage`
`system.monitor`
`org.audit.read`
`org.read`
`org.manage`
`user.directory.read`
Workflow
`workflow.design`
E-Sign
`signature.sign`
Documents
`document.read`
`document.write`
`document.manage`
Team
`team.assign`
`team.manage`
`team.training_complete`
`delegation.sign`
Library
`library.write`
AI
`ai.generate`
Safety
`clinical.event.read`
`clinical.event.write`
`clinical.event.report`
`clinical.event.review`
`clinical.event.reconcile`
`deviation.report`

Click a role (column) to see everything it can do, or a permission (row) to see who holds it. Access is further narrowed by study membership, site scope, and environment (ABAC).