List the fixed permission vocabulary for custom roles

GET 
/api/v1/authorization/permissions

Requires roles.manage. The returned codes are application-owned; custom roles cannot introduce a new code that has no server-side enforcement point.

Responses

200

Explicit permission codes allowed in a custom role

401

The opaque credential is absent, ambiguous, malformed, expired, revoked, or invalid

403

The browser mutation did not originate from this application, or the authenticated member lacks the required permission

503

A required core dependency is unavailable; retry with bounded backoff