Vai trò và quyền

Vai trò và quyền

Ma trận được sinh tại build từ backend/src/admin_portal/core/permissions.py. Super Admin có bypass toàn quyền; Release Engineer chưa có grant. Quyền PII cần step-up riêng.

Vai trò	Tài nguyên	Quyền
super_admin	game_registry, dashboard_kpi, player_profile, leaderboard, profile_catalog, player_pii, catalog, remote_config, ad_reward_rule, economy_ledger, grant_revoke_item, reward_item, live_reward, purchase_refund, audit_log, admin_users, export, infra_health	game_registry: read, write, publish, mutate, admin; dashboard_kpi: read, write, publish, mutate, admin; player_profile: read, write, publish, mutate, admin; leaderboard: read, write, publish, mutate, admin; profile_catalog: read, write, publish, mutate, admin; player_pii: read, write, publish, mutate, admin; catalog: read, write, publish, mutate, admin; remote_config: read, write, publish, mutate, admin; ad_reward_rule: read, write, publish, mutate, admin; economy_ledger: read, write, publish, mutate, admin; grant_revoke_item: read, write, publish, mutate, admin; reward_item: read, write, publish, mutate, admin; live_reward: read, write, publish, mutate, admin; purchase_refund: read, write, publish, mutate, admin; audit_log: read, write, publish, mutate, admin; admin_users: read, write, publish, mutate, admin; export: read, write, publish, mutate, admin; infra_health: read, write, publish, mutate, admin
game_owner	game_registry, dashboard_kpi, player_profile, leaderboard, profile_catalog, catalog, remote_config, ad_reward_rule, economy_ledger, reward_item, live_reward, purchase_refund, audit_log, export, infra_health	game_registry: read; dashboard_kpi: read; player_profile: read, write; leaderboard: read, write; profile_catalog: read, write; catalog: read, write; remote_config: read, write, publish; ad_reward_rule: read; economy_ledger: read, write; reward_item: read, write; live_reward: read; purchase_refund: read; audit_log: read; export: read; infra_health: read
live_ops	dashboard_kpi, player_profile, leaderboard, profile_catalog, catalog, remote_config, ad_reward_rule, economy_ledger, reward_item, live_reward, purchase_refund, audit_log, export, infra_health	dashboard_kpi: read; player_profile: read, write; leaderboard: read, write; profile_catalog: read, write; catalog: read, write, publish; remote_config: read, write, publish; ad_reward_rule: read, write, publish; economy_ledger: read, write; reward_item: read, write; live_reward: read, write, publish; purchase_refund: read; audit_log: read; export: read; infra_health: read
economy_admin	dashboard_kpi, player_profile, leaderboard, profile_catalog, catalog, remote_config, ad_reward_rule, economy_ledger, grant_revoke_item, reward_item, live_reward, purchase_refund, audit_log, export, infra_health	dashboard_kpi: read; player_profile: read; leaderboard: read; profile_catalog: read; catalog: read, write, publish; remote_config: read; ad_reward_rule: read; economy_ledger: read; grant_revoke_item: mutate; reward_item: read, write; live_reward: read, write, publish; purchase_refund: read; audit_log: read; export: read; infra_health: read
support_agent	dashboard_kpi, player_profile, leaderboard, profile_catalog, catalog, economy_ledger, reward_item, live_reward, purchase_refund, audit_log, export	dashboard_kpi: read; player_profile: read, write; leaderboard: read; profile_catalog: read; catalog: read; economy_ledger: read; reward_item: read; live_reward: read; purchase_refund: read; audit_log: read; export: read
finance	dashboard_kpi, player_profile, leaderboard, profile_catalog, catalog, ad_reward_rule, economy_ledger, reward_item, live_reward, purchase_refund, audit_log, export	dashboard_kpi: read; player_profile: read; leaderboard: read; profile_catalog: read; catalog: read; ad_reward_rule: read; economy_ledger: read; reward_item: read; live_reward: read; purchase_refund: read, write; audit_log: read; export: read
analyst	game_registry, dashboard_kpi, player_profile, leaderboard, profile_catalog, catalog, remote_config, ad_reward_rule, economy_ledger, reward_item, live_reward, purchase_refund, audit_log, export	game_registry: read; dashboard_kpi: read; player_profile: read; leaderboard: read; profile_catalog: read; catalog: read; remote_config: read; ad_reward_rule: read; economy_ledger: read; reward_item: read; live_reward: read; purchase_refund: read; audit_log: read; export: read
auditor	game_registry, dashboard_kpi, player_profile, leaderboard, profile_catalog, catalog, remote_config, ad_reward_rule, economy_ledger, reward_item, live_reward, purchase_refund, audit_log, admin_users, export, infra_health	game_registry: read; dashboard_kpi: read; player_profile: read; leaderboard: read; profile_catalog: read; catalog: read; remote_config: read; ad_reward_rule: read; economy_ledger: read; reward_item: read; live_reward: read; purchase_refund: read; audit_log: read; admin_users: read; export: read; infra_health: read
release_engineer	—	Chưa cấp