Noxus uses a fine-grained permission system based on discrete permission keys. These permissions directly control the user experience by modifying what features and data are visible within the platform interface.
Beyond the UI, these permissions also apply to API Keys. When creating an API key you can optionally restrict it to a subset of your own workspace permissions—a key can never exceed the permissions of the user who created it.
Permissions are divided into Workspace-level permissions (scoped to a specific workspace) and Organization-level permissions (tenant-wide administrative functions).
Workspace-Level Permissions
These permissions are specific to individual workspaces and control what a user can do inside that workspace.
The *_edit permission covers both creating and editing resources — there is no separate create permission.
workspace_admin is a superset of the other administration permissions. A user with workspace_admin automatically has full access to integrations and workspace member management, in addition to workspace control and API key management.
Organization-Level Permissions
These permissions apply across the entire organization and control tenant-wide administrative operations.
