Roller, yetenekler ve sayfalar
Beş sabit rol, gölge kipte çalışan yetenek matrisi ve her rolün hangi panel sayfasını açabildiği.
- Tür: başvuru
Beş sabit rol, 73 yetenekli erişim modeli ve her rolün açabildiği panel sayfaları.
make docs-generate ile yeniden üretilir.
Gölge kip. Yetenek modeli her istekte hesaplanır ve karşılaştırılır, ama henüz hiçbir şeyi zorlamaz (
GET /admin/rbac/shadow-report). Bugün zorlanan şey, denetleyicideki@Rolesile aşağıdaki sayfa taban çizgileridir. Yetenek matrisini yürürlükteki politika olarak değil, dekoratörlerin kendisine göre uyumlandığı tasarım olarak okuyun.
superadminveviewerüst kümelerdir:superadminher yeteneği taşır,viewerise her okumaya erişir ama yaptığı her değiştirme isteğiREAD_ONLY_ROLEile genel olarak reddedilir.
Roller
| Rol | Nedir | Veri kapsamı | Salt okunur | Atanabilir |
|---|---|---|---|---|
superadmin | The appliance owner. Holds every capability by superset, cannot be denied anything, and is the only role that may edit the access matrices or manage accounts. | global | hayır | evet |
admin_user | The day-to-day administrator: security policy, detections, compliance, governance, channels and platform operations. Reads its own tenant and the members of groups it owns. Account management stays with superadmin. | owned_groups | hayır | evet |
normal_user | An end user of the gateway. Holds no administrative capability; reads only its own data. | self | hayır | evet |
viewer | A read-only demo account. Satisfies any role requirement on a safe HTTP method and is refused every mutating request globally, by property of the request rather than by which endpoints it may call. | global | evet | evet |
auditor | An external reviewer. Reads compliance and governance evidence across every tenant, verifies frozen snapshots, and reads the audit trail. Cannot change anything, cannot read message content, and does not use the browser extension. It cannot start a chat or send a message either — an auditor must not spend your tokens or add to the evidence it is signing off — but it can read sessions that already exist. | global | hayır | evet |
Yetenekler (73)
● = API rolü kabul eder. — = reddeder.
güvenlik politikası (11)
| Yetenek | Neyi yönetir | superadmin | admin_user | normal_user | viewer | auditor | İşleyici sayısı |
|---|---|---|---|---|---|---|---|
filters.manage | Change what the gateway blocks: input filter groups, filters, regex patterns, and the import/export of a filter bundle. | ● | ● | — | ● | — | 25 |
filters.overrides.manage | Per-tenant and per-family overrides of the shipped filter set, and the detection-count escalation that refuses bulk sensitive data. | ● | ● | — | ● | — | 8 |
output_filters.manage | Response-side filter groups and filters. | ● | ● | — | ● | — | 11 |
filter_testing.run | The filter-testing lab: test cases, groups, runs, and the DeepTeam red-team benchmarks. | ● | ● | — | ● | — | 31 |
ml_engine.manage | Detection-engine status and the side-by-side engine comparison. | ● | ● | — | ● | — | 2 |
ml_tuning.manage | Detection thresholds. Restarts ML services, so it stays with superadmin. | ● | — | — | — | — | 3 |
ocr_settings.configure | Which one OCR engine image analysis runs, and its right-edge rescan. | ● | — | — | — | — | 2 |
document_redaction.configure | How documents are redacted before they leave the gateway. | ● | — | — | — | — | 2 |
code_safety.configure | Model-redaction settings for the code-safety auditor. | ● | — | — | — | — | 2 |
prompt_compression.configure | Input-token reduction before the provider call. | ● | — | — | — | — | 2 |
attack_knowledge.manage | The attack-knowledge entries the analyst reasons with: create, change, enable or disable, import, and promote a review into one. | ● | ● | — | ● | — | 8 |
tespit ve kanıt (15)
| Yetenek | Neyi yönetir | superadmin | admin_user | normal_user | viewer | auditor | İşleyici sayısı |
|---|---|---|---|---|---|---|---|
detections.view | The detection query API: list, statistics, and one detection. | ● | ● | — | ● | ● | 3 |
all_detections.view | The unified detection feed across chat, proxy, ICAP and extension — without message content. | ● | ● | — | ● | ● | 4 |
all_detections.view_content | Read the message body of a detection. The one capability in this inventory with no endpoint of its own, and the single line standing between an external auditor and customer conversation content. | ● | — | — | — | — | uç nokta yok |
risk_analysis.view | Read asynchronous risk analyses and their statistics. | ● | ● | — | ● | — | 5 |
risk_analysis.decide | Approve, reject or reopen a risk analysis — the review decision itself. | ● | ● | — | ● | — | 2 |
risk_analysis.run | Start an on-demand risk analysis of a session, or cancel one that is queued. | ● | ● | — | ● | — | 2 |
llm_review.view | Read LLM review verdicts, statistics, current locks, pending unlock requests, notifications and the review configuration. | ● | ● | — | ● | — | 7 |
llm_review.manage | Unlock a locked account, approve or deny an unlock request, and change the review configuration. | ● | ● | — | ● | — | 4 |
analyst.chat | Talk to the risk analyst, and list, read or delete your analyst chats. | ● | ● | — | ● | — | 5 |
threat_knowledge.view | Browse the shipped MITRE ATLAS and OWASP reference tables. | ● | ● | — | ● | — | 8 |
threat_knowledge.reload | Reload the ATLAS and OWASP tables from the shipped snapshot. | ● | — | — | — | — | 2 |
event_logs.view | The audit trail: event logs, request traces, per-object audit history, and the Claude Code activity views. | ● | ● | — | ● | ● | 14 |
retention.view | Read how long evidence is kept, and what is already past the window. The survey only — changing a window or running the sweep is retention.manage. | ● | ● | — | ● | ● | 1 |
retention.manage | Change how long evidence is kept, and run the retention sweep. Withheld from auditor — shortening a window or sweeping deletes the evidence being audited. | ● | ● | — | ● | — | 2 |
logs.purge | Delete log rows outright. The sharpest separation-of-duties line in the product: an auditor must never be able to delete the evidence they are auditing. | ● | — | — | — | — | 1 |
uyumluluk (10)
| Yetenek | Neyi yönetir | superadmin | admin_user | normal_user | viewer | auditor | İşleyici sayısı |
|---|---|---|---|---|---|---|---|
compliance.view | The substance of a compliance review: statistics, regulations, mapped detections, financial impact, entity mappings, the mapping version ledger those mappings are pinned to, and the FX rates every cross-currency total is computed from. | ● | ● | — | ● | ● | 9 |
compliance.configure | CHANGING the FX rates, the entity→regulation mappings and the per-regulation fine structures. Deliberately withheld from auditor: these change the fine figures in the report the auditor is signing off. Reading the rate table is compliance.view — the split is the whole point, and collapsing it back would either blind the auditor or let it author the numbers it verifies. | ● | ● | — | ● | — | 4 |
compliance.export | Download the four compliance PDFs: impact, regulations, detections, executive summary. | ● | ● | — | ● | ● | 4 |
compliance.reports.view | The graded per-subject scorecard and the leaderboard. | ● | ● | — | ● | ● | 3 |
compliance.snapshots.view | The auditor's core: list frozen periods, open one, read its per-regulation dossier, verify it without trusting us, download the artefact and its evidence pack, and see the snapshot schedule. | ● | ● | — | ● | ● | 9 |
compliance.snapshots.manage | Freeze a period and change the schedule. Withheld from auditor by design: verifying evidence and producing it are the two halves separation of duties exists to keep apart. | ● | ● | — | ● | — | 3 |
compliance.findings.view | List and read recorded compliance findings. | ● | ● | — | ● | ● | 2 |
compliance.findings.manage | Record a finding and change its state. | ● | ● | — | ● | — | 2 |
grc.view | Read the GRC/CRQ simulation: policy impact, baseline, controls, coverage, history and thresholds — plus the two POSTs that compute and persist nothing (the what-if and the PDF). | ● | ● | — | ● | ● | 9 |
grc.manage | Run a simulation, record control observations, and set control thresholds. The customer's act, not the auditor's. | ● | ● | — | ● | — | 4 |
yönetişim (4)
| Yetenek | Neyi yönetir | superadmin | admin_user | normal_user | viewer | auditor | İşleyici sayısı |
|---|---|---|---|---|---|---|---|
governance.view | The AI asset inventory: overview, assets, one asset and its consumers, findings, and the governance policy as read. | ● | ● | — | ● | ● | 6 |
governance.register | Register a discovered AI asset into the sanctioned inventory. | ● | ● | — | ● | — | 1 |
governance.decommission | Retire an AI asset from the inventory. | ● | ● | — | ● | — | 1 |
governance.policy.manage | Change the governance policy and run asset discovery. | ● | ● | — | ● | — | 2 |
kimlik ve erişim (10)
| Yetenek | Neyi yönetir | superadmin | admin_user | normal_user | viewer | auditor | İşleyici sayısı |
|---|---|---|---|---|---|---|---|
tenants.view | List accounts and read one. | ● | ● | — | ● | — | 2 |
tenants.manage | Create, change and delete accounts, generate a password-reset link, reset a user's two-factor enrolment, and sign an account out everywhere. The method-level superadmin override on a class decorated admin_user — the case a class-decorator reading gets wrong. | ● | — | — | — | — | 6 |
tenant_groups.manage | Tenant groups and their membership. | ● | ● | — | ● | — | 8 |
capability_access.manage | Edit the capability matrix. Superadmin-locked and undeniable: a role that can edit the matrix can grant itself anything, and a table that can hide the page holding the table can lock out the last administrator. | ● | — | — | — | — | 3 |
page_access.manage | Edit the page-visibility matrix. | ● | — | — | — | — | 2 |
credentials.manage | Provider API keys and the LLM readiness ledger. | ● | ● | — | ● | — | 10 |
api_keys.manage | Gateway API keys (cid_key_*). | ● | ● | — | ● | — | 8 |
ldap.configure | AD/LDAP connection, directory browsing, and the sync scopes that place accounts. | ● | ● | — | ● | — | 11 |
password_delivery.configure | How password-reset links reach a user (admin link, SMTP, EmailJS). | ● | — | — | — | — | 3 |
mfa.configure | Whether this box requires a second factor at sign-in, and how long a browser may be remembered. The key that decides whether a password alone is enough. | ● | — | — | — | — | 2 |
platform işletimi (11)
| Yetenek | Neyi yönetir | superadmin | admin_user | normal_user | viewer | auditor | İşleyici sayısı |
|---|---|---|---|---|---|---|---|
deployment.connectivity.set | Declare whether this appliance is internet-connected or air-gapped. One key, deployment-wide, and it changes the guidance on every LLM surface. | ● | — | — | — | — | 1 |
license.view | This appliance's license status, its activation request, and uploading a license file. | ● | ● | — | ● | — | 3 |
licenses.issue | The owner console: issue, renew and revoke licenses for customers. | ● | ● | — | ● | — | 9 |
system.update | Install a new appliance version: upload, verify, install, roll back. | ● | ● | — | ● | — | 13 |
system.certificates | The appliance's own HTTPS certificate: names, CSR, upload, switch to the appliance CA, and the outbound site CA. Every change is a host reconcile; no private key is readable here. | ● | ● | — | ● | — | 7 |
setup.run | The first-boot setup wizard, after an admin exists. Deliberately excludes GET /setup/status and POST /setup/admin, the pre-admin bootstrap that must work before any account does. | ● | ● | — | ● | — | 13 |
models.manage | The model inventory: models, their statistics, providers and aggregated usage. | ● | ● | — | ● | — | 4 |
model_routing.view | Read the routing policy and refresh it. | ● | ● | — | ● | — | 2 |
model_routing.manage | Choose the judge model and run a routing measurement. | ● | — | — | — | — | 3 |
help.configure | The in-product assistant's settings, and uploading a policy document for analysis. | ● | ● | — | ● | — | 3 |
diagnostics.view | The appliance self-diagnostics snapshot and support bundle: host sizing, container health, service reachability, licence and TLS state, egress tests and the derived findings. Read-only; the bundle redacts every secret. | ● | ● | — | ● | — | 3 |
kanallar ve uç noktalar (8)
| Yetenek | Neyi yönetir | superadmin | admin_user | normal_user | viewer | auditor | İşleyici sayısı |
|---|---|---|---|---|---|---|---|
inspection.configure | The inline-proxy/ICAP inspection policy, its event and coverage views, and the proxy's status and CA material. | ● | ● | — | ● | — | 9 |
attribution.manage | Workstation→user attribution records for proxy traffic. | ● | ● | — | ● | — | 5 |
extension.manage | Browser-extension deployment, enrolled devices, and the filter/threshold policies pushed to them. | ● | ● | — | ● | — | 6 |
extension.events.view | The extension event feed and its statistics. | ● | ● | — | ● | — | 2 |
edl_tokens.manage | Tokens the firewall uses to fetch the external dynamic list. | ● | ● | — | ● | — | 3 |
endpoint_agent.manage | The OS-level endpoint agent fleet: policy, rollout, kill switch, devices, installers. Superadmin-only for writes; viewer retains global read-only visibility, as everywhere. | ● | — | — | — | — | 11 |
repo_connector.manage | Repository tracking for the code-safety auditor: connectors, assignments, analyses and reports. | ● | — | — | — | — | 21 |
ai_usage.view | The Shadow-AI usage report: apps, people, riskiest activity, timeline and its PDF. | ● | ● | — | ● | — | 6 |
analitik ve maliyet (4)
| Yetenek | Neyi yönetir | superadmin | admin_user | normal_user | viewer | auditor | İşleyici sayısı |
|---|---|---|---|---|---|---|---|
analytics.view | Tenant usage statistics and their PDF. | ● | ● | — | ● | — | 2 |
cost_report.view | Token cost and savings across providers, models, users and sessions, including the PDF export. Administrators only. | ● | ● | — | ● | — | 7 |
cost_report.teams.view | Per-team cost breakdown: the same spend grouped by team rather than by account. | ● | ● | — | ● | — | 1 |
integrations.manage | Outbound SIEM and ITSM destinations: where detections and findings are exported to, and the credentials they use. | ● | ● | — | ● | — | 8 |
Rollere göre sayfalar (39)
Kurulu lisansın taşımadığı bir Lisans anahtarı olan sayfa, superadmin dâhil her rolden
düşülür — bunun bilinçli istisnası /license sayfasının kendisidir.
| Sayfa kimliği | Yol | Bölüm | superadmin | admin_user | normal_user | viewer | auditor | Lisans anahtarı |
|---|---|---|---|---|---|---|---|---|
dashboard | / | overview | ● | ● | — | ● | — | — |
ai-chat | /playground | overview | ● | ● | ● | — | — | — |
my-team | /my-team | overview | ● | ● | ● | ● | ● | risk.llm_review |
models | /ai-inventory/models | inventory | ● | ● | — | ● | — | — |
mcp-servers | /ai-inventory/mcp-servers | inventory | ● | ● | — | ● | — | — |
filters | /filters | detection | ● | ● | — | ● | — | — |
all-detections | /all-detections | detection | ● | ● | — | ● | ● | — |
ai-usage | /ai-usage | detection | ● | ● | — | ● | — | ext.browser |
claude-code | /claude-code | detection | ● | ● | — | ● | — | — |
inspection | /inspection | detection | ● | ● | — | ● | — | icap |
file-redaction | /file-redaction | detection | ● | ● | — | ● | — | — |
llm-review | /llm-review | detection | ● | ● | — | ● | — | risk.llm_review |
knowledge-base | /knowledge-base | detection | ● | ● | — | ● | — | risk.llm_review |
analyst | /analyst | detection | ● | ● | — | ● | — | risk.llm_review |
compliance | /compliance | compliance | ● | ● | — | ● | ● | compliance |
compliance-reports | /compliance-reports | compliance | ● | ● | — | ● | ● | compliance |
event-logs | /event-logs | compliance | ● | ● | — | ● | ● | — |
governance | /governance | governance | ● | ● | — | ● | ● | governance |
governance-inventory | /governance/inventory | governance | ● | ● | — | ● | ● | governance |
governance-risk | /governance/risk | governance | ● | ● | — | ● | ● | governance |
governance-ownership | /governance/ownership | governance | ● | ● | — | ● | ● | governance |
tenants | /tenants | access | ● | — | — | ● | — | — |
access-control | /access-control | access | ● | — | — | ● | — | — |
tenant-groups | /tenant-groups | access | ● | ● | — | ● | — | — |
credentials | /credentials | access | ● | ● | — | ● | — | — |
access-keys | /access-keys | access | ● | ● | — | ● | — | — |
endpoint-agent | /endpoint-agent | endpoints | ● | — | — | ● | — | endpoint.agent |
browser-extension | /browser-extension | endpoints | ● | ● | — | ● | — | ext.browser |
repo-connector | /repo-connector | endpoints | ● | ● | — | ● | — | codesafety |
tenant-analytics | /tenant-analytics | reporting | ● | ● | — | ● | — | — |
cost-savings | /cost-savings | reporting | ● | ● | — | ● | — | cost.calculator |
filter-testing | /filter-testing | lab | ● | ● | — | ● | — | — |
ocr-benchmark | /ocr-benchmark | lab | ● | ● | — | ● | — | — |
key-testing | /key-testing | lab | ● | ● | — | ● | — | — |
ml-engine | /ml-engine | lab | ● | ● | — | ● | — | — |
settings | /settings | system | ● | ● | ● | ● | ● | — |
license | /license | system | ● | ● | — | ● | — | — |
system-update | /system-update | system | ● | ● | — | ● | — | — |
license-admin | /license-admin | system | ● | ● | — | ● | — | — |
Sınır durumlar
- Herkeste bulunanlar (0): — — yönettikleri işleyicilerde hiç
@Rolesyoktur, dolayısıyla oturum açan her hesap bunlara erişir. Sessizce yükseltilmedi, kayda geçirildi. - Uç noktası olmayanlar (1):
all_detections.view_content— rotası olmayan, hizmet düzeyindeki kapılar. - Planlanmış işleyiciler (1):
capability_access.manage— uç noktalar var olmadan önce bildirildi; açılıştaki doğrulama bunları atlar.