Roles and permissions

Check the scope before acting

A sign-in account, institution membership, saved role, transaction signer, and payout recipient have different meanings. Permissions depend on the selected entity and object, not only the workspace name.

Ownership and operating roles

• Owner and pending-owner states follow a dedicated transfer and acceptance flow. A pending owner is not automatically the active owner.
• Curators configure only the supported vault scope. Allocators allocate and deallocate within approved vault-market scope and caps.
• Fee and payout recipients receive cash through their configured path. Their recipient status does not grant deployment or configuration powers.
• Recovery-fund participants have participation rights; they do not inherit recovery operating authority.

Current role families

The action names below identify the source-defined action families. Effective permission, entity scope, network, current state, and required approvals are checked again when the action executes.

allocator

Role identifier: allocator. Registered field scope: 19 entries.

Supported action families: fundIdleCash, vaultReallocationBatch, vaultAllocate, vaultDeallocate.

asset issuer

Role identifier: asset_issuer. Registered field scope: 25 entries.

Supported action families: assetEditorSave, assetPolicyUpdate, assetIssuerPolicyDelegateUpdate, assetRegistryUpdate, assetSubmissionRequestCreate, permissionTemplateAndGrantSave, publicProfileSaveDraft, publicProfilePublish, publicProfileRollback, scopedEntityAuthorityOperations, finalizeEntityOwnerRecovery, finalizeEntityGuardianRecovery, organizationAuditExaminationGrantCreate, organizationAuditExaminationGrantRevoke.

asset manager

Role identifier: asset_manager. Registered field scope: 54 entries.

Supported action families: assetEditorSave, assetPolicyUpdate, assetRegistryUpdate, createSharedMarket, assetManagerIrmDeploy, irmTransitionGovernance, marketLiveToggle, oracleTransitionGovernance, pairOracleCreate, assetManagerPairOracleCreate, assetManagerStandardOracleCreate, permissionTemplateAndGrantSave, sharedMarketAccessUpdate, sharedMarketRiskParamsUpdate, usdOracleDeployAndSubmit, vaultDeploy, assetManagerRecoveryLossRecognition, assetManagerRecoveryExecutorUpdate, assetManagerRecoveryValuationUpdate, assetManagerRecoveryFundProductUpdate, assetManagerRecoveryRestrictedAssetPolicyUpdate, assetManagerRecoveryPositionApprovalUpdate, assetManagerRecoveryFundShareTokenUpdate, attachVaultToMarketInRegistry, assetManagerMarketHardUnsafeSet, assetManagerMarketHardUnsafeClear, assetManagerMarketDegradedSet, assetManagerMarketDegradedClear, assetManagerMarketProtectivePriceSet, assetManagerMarketProtectivePriceClear, distressedRecoveryFundV3RfqFinalize, distressedRecoveryFundV3SelfLaunch, distressedRecoveryFundV3ManagerReassignment, distressedRecoveryAcquisitionV3Bid, distressedRecoveryAcquisitionV3Finalize, distressedRecoveryAcquisitionV3CancelWithoutBid, distressedRecoveryAcquisitionV3CancelInvalidWinner, distressedRecoveryFundV3ChannelPolicySet, aiAllocatorWalletProvisionAndFund, vaultShareMobilityManagerAction, publicProfileSaveDraft, publicProfilePublish, publicProfileRollback, distressedRecoveryFundV3ScheduleEpochTemplate, distressedRecoveryFundV3Acquire, distressedRecoveryFundV3CreateEscrowRfq, distressedRecoveryFundV3CreateSaleOrder, distressedRecoveryFundV3CancelSaleOrder, distressedRecoveryFundV3ClaimPerformanceFee, distressedRecoveryFundV3AuctionCreate, distressedRecoveryFundV3AuctionFinalize, distressedRecoveryFundV3AuctionCancelRevokedWinner, distressedRecoveryFundV3VerifyParticipant, distressedRecoveryFundV3SetParticipantRole, distressedRecoveryFundV3EnableInKind, distressedRecoveryFundV3FinalizeInKind, distressedRecoveryFundV3RollEpoch, setDistressedRecoveryFundV3EmergencyPauseAction, setDistressedRecoveryFundV3ClaimPauseAction, assetManagerRecoveryEmergencyUnpauseQueue, assetManagerRecoveryClaimUnpauseQueue, setDistressedRecoveryFundV3PerformanceFeeAction, approveDistressedRecoveryFundV3Action, managedResolution.continue_workout, managedResolution.accept_sale, managedResolution.open_floor_veto, managedResolution.finalize_floor_veto, managedResolution.take_control, managedResolution.close, managedResolution.activate_backup, distressedRecoveryFundPurchase, distressedRecoveryCashPayment, distressedRecoveryV2NoPriceReviewCancel, distressedRecoveryV2NoPriceReviewExpire, distressedRecoveryV2EmergencyPauseClear, distressedRecoveryV2ClaimPauseClear, scopedEntityAuthorityOperations, distressedFundEpochCapsUpdate, distressedFundScopedRoleUpdate, distressedFundManagerFeeRecipientUpdate, assetManagerRecoveryQuoteAssetProfileUpdate, assetManagerRecoveryFundReadinessUpdate, assetManagerRecoveryPriceSourceProfileUpdate, distressedRecoveryAcquisitionV3ListPosition, finalizeEntityOwnerRecovery, finalizeEntityGuardianRecovery, organizationAuditExaminationGrantCreate, organizationAuditExaminationGrantRevoke.

authenticated examination recipient

Role identifier: authenticated_examination_recipient. Registered field scope: 1 entries.

No mutation action is declared for this role in the current action registry. Use the authorized read or service scope.

borrower

Role identifier: borrower. Registered field scope: 34 entries.

Supported action families: borrowerBorrow, borrowerDepositCollateral, borrowerRepay, borrowerWithdrawCollateral, stakeholderIncidentReportSubmit.

curator

Role identifier: curator. Registered field scope: 22 entries.

Supported action families: createSharedMarket, irmTransitionGovernance, oracleTransitionGovernance, pairOracleCreate, sharedMarketAccessUpdate, vaultManagementSettingsSave, vaultMarketAllocationToggle, vaultMarketApprovalUpdate, vaultMarketConfigSave, vaultMarketListingSave, fundIdleCash, vaultTrancheRedemptionStateUpdate, vaultResellerManagerUpdate, vaultSettingsUpdate, partnerManagerBootstrap, partnerChannelDeploy, partnerChannelBlockedUpdate, partnerBorrowerFeeClaim, attachMarketToVault, attachVaultToMarketInRegistry, vaultShareMobilityManagerAction.

entity pending owner

Role identifier: entity_pending_owner. Registered field scope: 1 entries.

Supported action families: acceptEntityOwnership.

institution member

Role identifier: institution_member. Registered field scope: 8 entries.

No mutation action is declared for this role in the current action registry. Use the authorized read or service scope.

lender

Role identifier: lender. Registered field scope: 53 entries.

Supported action families: lenderDeposit, investorFulfillRedeem, vaultResellerWrapperClaimLossBearerRecovery, vaultLossBearerRecoveryClaim, investorRequestRedeem, managedResolution.cast_floor_veto, partnerWrapperDeposit, partnerWrapperRedeem, partnerWrapperTransfer, stakeholderIncidentReportSubmit, distressedRecoveryFundV3RfqPlaceBid, distressedRecoveryFundV3RfqReplaceBid, distressedRecoveryFundV3RfqCancelBid, distressedRecoveryFundV3RfqFinalize, distressedRecoveryFundV3RfqClaimRefund, distressedRecoveryFundV3AuctionBid, vaultShareMobilityInvestorAction, vaultContractAccessInvestorAction, distressedRecoveryFundV3AuctionWithdrawRefund, distressedRecoveryFundV3Subscribe, distressedRecoveryFundV3RedeemIdle, distressedRecoveryFundV3ClaimQuote, distressedRecoveryFundV3ClaimAsset, distressedRecoveryFundV3FillSaleOrder, distressedRecoveryFundV3Workout, partnerWrapperClaim, syncLossBearerRecovery.

liquidator

Role identifier: liquidator. Registered field scope: 29 entries.

Supported action families: liquidate, settleLiquidationClaim, stakeholderIncidentReportSubmit, distressedRecoveryFundPurchase, distressedRecoveryCashPayment, distressedRecoveryV2NoPriceReviewCancel, distressedRecoveryV2NoPriceReviewExpire, distressedRecoveryV2EmergencyPauseClear, distressedRecoveryV2ClaimPauseClear.

nav reporter

Role identifier: nav_reporter. Registered field scope: 21 entries.

Supported action families: navReportSignAndSubmit, navReportCancelPending, permissionTemplateAndGrantSave, publicProfileSaveDraft, publicProfilePublish, publicProfileRollback, scopedEntityAuthorityOperations, finalizeEntityOwnerRecovery, finalizeEntityGuardianRecovery, organizationAuditExaminationGrantCreate, organizationAuditExaminationGrantRevoke.

partner

Role identifier: partner. Registered field scope: 8 entries.

Supported action families: partnerSubmitApplication, partnerChannelDeploy, partnerFeeSharesClaim, partnerWrapperDeposit, partnerWrapperRedeem, partnerWrapperTransfer, stakeholderIncidentReportSubmit, publicProfileSaveDraft, publicProfilePublish, publicProfileRollback, partnerWrapperClaim, finalizeEntityOwnerRecovery, finalizeEntityGuardianRecovery.

public

Role identifier: public. Registered field scope: 7 entries.

Supported action families: opportunityEmailSubscription, opportunityEmailUnsubscribe.

recovery buyer

Role identifier: recovery_buyer. Registered field scope: 2 entries.

No mutation action is declared for this role in the current action registry. Use the authorized read or service scope.

reseller

Role identifier: reseller. Registered field scope: 7 entries.

Supported action families: stakeholderIncidentReportSubmit, scopedEntityAuthorityOperations, organizationAuditExaminationGrantCreate, organizationAuditExaminationGrantRevoke.

unauthenticated

Role identifier: unauthenticated. Registered field scope: 3 entries.

No mutation action is declared for this role in the current action registry. Use the authorized read or service scope.

vault curator

Role identifier: vault_curator. Registered field scope: 0 entries.

No mutation action is declared for this role in the current action registry. Use the authorized read or service scope.

vault manager

Role identifier: vault_manager. Registered field scope: 2 entries.

Supported action families: partnerManagerBootstrap, partnerChannelDeploy.

vault owner

Role identifier: vault_owner. Registered field scope: 20 entries.

Supported action families: vaultAllocatorUpdate, vaultCuratorCapsSettingsSave, vaultCuratorFeeSettingsSave, vaultManagementSettingsSave, vaultMarketConfigSave, vaultMarketListingSave, vaultOwnerSettingsSave, vaultOwnerTransferUpdate, vaultOwnerCancelOwnershipTransfer, vaultAutoFeeSweepThresholdsUpdate, fundIdleCash, vaultTrancheRedemptionStateUpdate, vaultMarketImpairmentUpdate, vaultProtocolSpreadFeesCollect, vaultProtocolVaultFeesCollect, vaultReallocationBatch, vaultRoleSettingsSave, vaultRoutingUpdate, vaultSettingsUpdate, partnerApplicationReview, partnerChannelTermsUpdate, partnerManagerFeeAttribution, attachMarketToVault, bumpVaultMarketEpoch, vaultFeeConfigUpdate, vaultAllocate, vaultDeallocate, vaultShareMobilityManagerAction.

vault pending owner

Role identifier: vault_pending_owner. Registered field scope: 9 entries.

Supported action families: vaultPendingOwnerAccept.