Production permission catalog

Access Control

Rules8
Modeldeny-by-default
fetch failed
ControlPermissionOwner
Fleet createbeacons:fleet:createKeystone IAM
Fleet readbeacons:fleet:readKeystone IAM
Peer enrollbeacons:peer:enrollKeystone IAM + challenge
Peer joinbeacons:fleet:joinCapability grant
Peer heartbeatbeacons:peer:heartbeatKeystone IAM
Audit readbeacons:audit:readKeystone IAM
Relay readbeacons:relay:readKeystone IAM
Billing readbeacons:billing:readGarden via Keystone