Authorization

Fields are gated by the same capability model as the dashboard. Capabilities are fine-grained, one action each, not bundles, so a role can ship apps without being able to delete them, or read logs without opening a console. The full list is the Capability enum in schema.graphql; the ones you will meet most:

Some operations are gated on instance admin (global) instead of a team capability: user management, Docker cleanup, the panel's own address, and a host's own TLS certificates.

See also