tauri-plugins-workspace/plugins/fs/permissions/autogenerated/reference.md

Permissions

allow-app-read-recursive

This allows full recursive read access to the complete $APP folder, files and subdirectories.

allow-app-write-recursive

This allows full recusrive write access to the complete $APP folder, files and subdirectories.

allow-app-read

This allows non-recursive read access to the $APP folder.

allow-app-write

This allows non-recursive write access to the $APP folder.

allow-app-meta-recursive

This allows read access to metadata of the $APP folder, including file listing and statistics.

allow-app-meta

This allows read access to metadata of the $APP folder, including file listing and statistics.

scope-app-recursive

This scope recursive access to the complete $APP folder, including sub directories and files.

scope-app

This scope permits access to all files and list content of top level directories in the $APPfolder.

scope-app-index

This scope permits to list all files and folders in the $APPfolder.

allow-appcache-read-recursive

This allows full recursive read access to the complete $APPCACHE folder, files and subdirectories.

allow-appcache-write-recursive

This allows full recusrive write access to the complete $APPCACHE folder, files and subdirectories.

allow-appcache-read

This allows non-recursive read access to the $APPCACHE folder.

allow-appcache-write

This allows non-recursive write access to the $APPCACHE folder.

allow-appcache-meta-recursive

This allows read access to metadata of the $APPCACHE folder, including file listing and statistics.

allow-appcache-meta

This allows read access to metadata of the $APPCACHE folder, including file listing and statistics.

scope-appcache-recursive

This scope recursive access to the complete $APPCACHE folder, including sub directories and files.

scope-appcache

This scope permits access to all files and list content of top level directories in the $APPCACHEfolder.

scope-appcache-index

This scope permits to list all files and folders in the $APPCACHEfolder.

allow-appconfig-read-recursive

This allows full recursive read access to the complete $APPCONFIG folder, files and subdirectories.

allow-appconfig-write-recursive

This allows full recusrive write access to the complete $APPCONFIG folder, files and subdirectories.

allow-appconfig-read

This allows non-recursive read access to the $APPCONFIG folder.

allow-appconfig-write

This allows non-recursive write access to the $APPCONFIG folder.

allow-appconfig-meta-recursive

This allows read access to metadata of the $APPCONFIG folder, including file listing and statistics.

allow-appconfig-meta

This allows read access to metadata of the $APPCONFIG folder, including file listing and statistics.

scope-appconfig-recursive

This scope recursive access to the complete $APPCONFIG folder, including sub directories and files.

scope-appconfig

This scope permits access to all files and list content of top level directories in the $APPCONFIGfolder.

scope-appconfig-index

This scope permits to list all files and folders in the $APPCONFIGfolder.

allow-appdata-read-recursive

This allows full recursive read access to the complete $APPDATA folder, files and subdirectories.

allow-appdata-write-recursive

This allows full recusrive write access to the complete $APPDATA folder, files and subdirectories.

allow-appdata-read

This allows non-recursive read access to the $APPDATA folder.

allow-appdata-write

This allows non-recursive write access to the $APPDATA folder.

allow-appdata-meta-recursive

This allows read access to metadata of the $APPDATA folder, including file listing and statistics.

allow-appdata-meta

This allows read access to metadata of the $APPDATA folder, including file listing and statistics.

scope-appdata-recursive

This scope recursive access to the complete $APPDATA folder, including sub directories and files.

scope-appdata

This scope permits access to all files and list content of top level directories in the $APPDATAfolder.

scope-appdata-index

This scope permits to list all files and folders in the $APPDATAfolder.

allow-applocaldata-read-recursive

This allows full recursive read access to the complete $APPLOCALDATA folder, files and subdirectories.

allow-applocaldata-write-recursive

This allows full recusrive write access to the complete $APPLOCALDATA folder, files and subdirectories.

allow-applocaldata-read

This allows non-recursive read access to the $APPLOCALDATA folder.

allow-applocaldata-write

This allows non-recursive write access to the $APPLOCALDATA folder.

allow-applocaldata-meta-recursive

This allows read access to metadata of the $APPLOCALDATA folder, including file listing and statistics.

allow-applocaldata-meta

This allows read access to metadata of the $APPLOCALDATA folder, including file listing and statistics.

scope-applocaldata-recursive

This scope recursive access to the complete $APPLOCALDATA folder, including sub directories and files.

scope-applocaldata

This scope permits access to all files and list content of top level directories in the $APPLOCALDATAfolder.

scope-applocaldata-index

This scope permits to list all files and folders in the $APPLOCALDATAfolder.

allow-applog-read-recursive

This allows full recursive read access to the complete $APPLOG folder, files and subdirectories.

allow-applog-write-recursive

This allows full recusrive write access to the complete $APPLOG folder, files and subdirectories.

allow-applog-read

This allows non-recursive read access to the $APPLOG folder.

allow-applog-write

This allows non-recursive write access to the $APPLOG folder.

allow-applog-meta-recursive

This allows read access to metadata of the $APPLOG folder, including file listing and statistics.

allow-applog-meta

This allows read access to metadata of the $APPLOG folder, including file listing and statistics.

scope-applog-recursive

This scope recursive access to the complete $APPLOG folder, including sub directories and files.

scope-applog

This scope permits access to all files and list content of top level directories in the $APPLOGfolder.

scope-applog-index

This scope permits to list all files and folders in the $APPLOGfolder.

allow-audio-read-recursive

This allows full recursive read access to the complete $AUDIO folder, files and subdirectories.

allow-audio-write-recursive

This allows full recusrive write access to the complete $AUDIO folder, files and subdirectories.

allow-audio-read

This allows non-recursive read access to the $AUDIO folder.

allow-audio-write

This allows non-recursive write access to the $AUDIO folder.

allow-audio-meta-recursive

This allows read access to metadata of the $AUDIO folder, including file listing and statistics.

allow-audio-meta

This allows read access to metadata of the $AUDIO folder, including file listing and statistics.

scope-audio-recursive

This scope recursive access to the complete $AUDIO folder, including sub directories and files.

scope-audio

This scope permits access to all files and list content of top level directories in the $AUDIOfolder.

scope-audio-index

This scope permits to list all files and folders in the $AUDIOfolder.

allow-cache-read-recursive

This allows full recursive read access to the complete $CACHE folder, files and subdirectories.

allow-cache-write-recursive

This allows full recusrive write access to the complete $CACHE folder, files and subdirectories.

allow-cache-read

This allows non-recursive read access to the $CACHE folder.

allow-cache-write

This allows non-recursive write access to the $CACHE folder.

allow-cache-meta-recursive

This allows read access to metadata of the $CACHE folder, including file listing and statistics.

allow-cache-meta

This allows read access to metadata of the $CACHE folder, including file listing and statistics.

scope-cache-recursive

This scope recursive access to the complete $CACHE folder, including sub directories and files.

scope-cache

This scope permits access to all files and list content of top level directories in the $CACHEfolder.

scope-cache-index

This scope permits to list all files and folders in the $CACHEfolder.

allow-config-read-recursive

This allows full recursive read access to the complete $CONFIG folder, files and subdirectories.

allow-config-write-recursive

This allows full recusrive write access to the complete $CONFIG folder, files and subdirectories.

allow-config-read

This allows non-recursive read access to the $CONFIG folder.

allow-config-write

This allows non-recursive write access to the $CONFIG folder.

allow-config-meta-recursive

This allows read access to metadata of the $CONFIG folder, including file listing and statistics.

allow-config-meta

This allows read access to metadata of the $CONFIG folder, including file listing and statistics.

scope-config-recursive

This scope recursive access to the complete $CONFIG folder, including sub directories and files.

scope-config

This scope permits access to all files and list content of top level directories in the $CONFIGfolder.

scope-config-index

This scope permits to list all files and folders in the $CONFIGfolder.

allow-data-read-recursive

This allows full recursive read access to the complete $DATA folder, files and subdirectories.

allow-data-write-recursive

This allows full recusrive write access to the complete $DATA folder, files and subdirectories.

allow-data-read

This allows non-recursive read access to the $DATA folder.

allow-data-write

This allows non-recursive write access to the $DATA folder.

allow-data-meta-recursive

This allows read access to metadata of the $DATA folder, including file listing and statistics.

allow-data-meta

This allows read access to metadata of the $DATA folder, including file listing and statistics.

scope-data-recursive

This scope recursive access to the complete $DATA folder, including sub directories and files.

scope-data

This scope permits access to all files and list content of top level directories in the $DATAfolder.

scope-data-index

This scope permits to list all files and folders in the $DATAfolder.

allow-desktop-read-recursive

This allows full recursive read access to the complete $DESKTOP folder, files and subdirectories.

allow-desktop-write-recursive

This allows full recusrive write access to the complete $DESKTOP folder, files and subdirectories.

allow-desktop-read

This allows non-recursive read access to the $DESKTOP folder.

allow-desktop-write

This allows non-recursive write access to the $DESKTOP folder.

allow-desktop-meta-recursive

This allows read access to metadata of the $DESKTOP folder, including file listing and statistics.

allow-desktop-meta

This allows read access to metadata of the $DESKTOP folder, including file listing and statistics.

scope-desktop-recursive

This scope recursive access to the complete $DESKTOP folder, including sub directories and files.

scope-desktop

This scope permits access to all files and list content of top level directories in the $DESKTOPfolder.

scope-desktop-index

This scope permits to list all files and folders in the $DESKTOPfolder.

allow-document-read-recursive

This allows full recursive read access to the complete $DOCUMENT folder, files and subdirectories.

allow-document-write-recursive

This allows full recusrive write access to the complete $DOCUMENT folder, files and subdirectories.

allow-document-read

This allows non-recursive read access to the $DOCUMENT folder.

allow-document-write

This allows non-recursive write access to the $DOCUMENT folder.

allow-document-meta-recursive

This allows read access to metadata of the $DOCUMENT folder, including file listing and statistics.

allow-document-meta

This allows read access to metadata of the $DOCUMENT folder, including file listing and statistics.

scope-document-recursive

This scope recursive access to the complete $DOCUMENT folder, including sub directories and files.

scope-document

This scope permits access to all files and list content of top level directories in the $DOCUMENTfolder.

scope-document-index

This scope permits to list all files and folders in the $DOCUMENTfolder.

allow-download-read-recursive

This allows full recursive read access to the complete $DOWNLOAD folder, files and subdirectories.

allow-download-write-recursive

This allows full recusrive write access to the complete $DOWNLOAD folder, files and subdirectories.

allow-download-read

This allows non-recursive read access to the $DOWNLOAD folder.

allow-download-write

This allows non-recursive write access to the $DOWNLOAD folder.

allow-download-meta-recursive

This allows read access to metadata of the $DOWNLOAD folder, including file listing and statistics.

allow-download-meta

This allows read access to metadata of the $DOWNLOAD folder, including file listing and statistics.

scope-download-recursive

This scope recursive access to the complete $DOWNLOAD folder, including sub directories and files.

scope-download

This scope permits access to all files and list content of top level directories in the $DOWNLOADfolder.

scope-download-index

This scope permits to list all files and folders in the $DOWNLOADfolder.

allow-exe-read-recursive

This allows full recursive read access to the complete $EXE folder, files and subdirectories.

allow-exe-write-recursive

This allows full recusrive write access to the complete $EXE folder, files and subdirectories.

allow-exe-read

This allows non-recursive read access to the $EXE folder.

allow-exe-write

This allows non-recursive write access to the $EXE folder.

allow-exe-meta-recursive

This allows read access to metadata of the $EXE folder, including file listing and statistics.

allow-exe-meta

This allows read access to metadata of the $EXE folder, including file listing and statistics.

scope-exe-recursive

This scope recursive access to the complete $EXE folder, including sub directories and files.

scope-exe

This scope permits access to all files and list content of top level directories in the $EXEfolder.

scope-exe-index

This scope permits to list all files and folders in the $EXEfolder.

allow-font-read-recursive

This allows full recursive read access to the complete $FONT folder, files and subdirectories.

allow-font-write-recursive

This allows full recusrive write access to the complete $FONT folder, files and subdirectories.

allow-font-read

This allows non-recursive read access to the $FONT folder.

allow-font-write

This allows non-recursive write access to the $FONT folder.

allow-font-meta-recursive

This allows read access to metadata of the $FONT folder, including file listing and statistics.

allow-font-meta

This allows read access to metadata of the $FONT folder, including file listing and statistics.

scope-font-recursive

This scope recursive access to the complete $FONT folder, including sub directories and files.

scope-font

This scope permits access to all files and list content of top level directories in the $FONTfolder.

scope-font-index

This scope permits to list all files and folders in the $FONTfolder.

allow-home-read-recursive

This allows full recursive read access to the complete $HOME folder, files and subdirectories.

allow-home-write-recursive

This allows full recusrive write access to the complete $HOME folder, files and subdirectories.

allow-home-read

This allows non-recursive read access to the $HOME folder.

allow-home-write

This allows non-recursive write access to the $HOME folder.

allow-home-meta-recursive

This allows read access to metadata of the $HOME folder, including file listing and statistics.

allow-home-meta

This allows read access to metadata of the $HOME folder, including file listing and statistics.

scope-home-recursive

This scope recursive access to the complete $HOME folder, including sub directories and files.

scope-home

This scope permits access to all files and list content of top level directories in the $HOMEfolder.

scope-home-index

This scope permits to list all files and folders in the $HOMEfolder.

allow-localdata-read-recursive

This allows full recursive read access to the complete $LOCALDATA folder, files and subdirectories.

allow-localdata-write-recursive

This allows full recusrive write access to the complete $LOCALDATA folder, files and subdirectories.

allow-localdata-read

This allows non-recursive read access to the $LOCALDATA folder.

allow-localdata-write

This allows non-recursive write access to the $LOCALDATA folder.

allow-localdata-meta-recursive

This allows read access to metadata of the $LOCALDATA folder, including file listing and statistics.

allow-localdata-meta

This allows read access to metadata of the $LOCALDATA folder, including file listing and statistics.

scope-localdata-recursive

This scope recursive access to the complete $LOCALDATA folder, including sub directories and files.

scope-localdata

This scope permits access to all files and list content of top level directories in the $LOCALDATAfolder.

scope-localdata-index

This scope permits to list all files and folders in the $LOCALDATAfolder.

allow-log-read-recursive

This allows full recursive read access to the complete $LOG folder, files and subdirectories.

allow-log-write-recursive

This allows full recusrive write access to the complete $LOG folder, files and subdirectories.

allow-log-read

This allows non-recursive read access to the $LOG folder.

allow-log-write

This allows non-recursive write access to the $LOG folder.

allow-log-meta-recursive

This allows read access to metadata of the $LOG folder, including file listing and statistics.

allow-log-meta

This allows read access to metadata of the $LOG folder, including file listing and statistics.

scope-log-recursive

This scope recursive access to the complete $LOG folder, including sub directories and files.

scope-log

This scope permits access to all files and list content of top level directories in the $LOGfolder.

scope-log-index

This scope permits to list all files and folders in the $LOGfolder.

allow-picture-read-recursive

This allows full recursive read access to the complete $PICTURE folder, files and subdirectories.

allow-picture-write-recursive

This allows full recusrive write access to the complete $PICTURE folder, files and subdirectories.

allow-picture-read

This allows non-recursive read access to the $PICTURE folder.

allow-picture-write

This allows non-recursive write access to the $PICTURE folder.

allow-picture-meta-recursive

This allows read access to metadata of the $PICTURE folder, including file listing and statistics.

allow-picture-meta

This allows read access to metadata of the $PICTURE folder, including file listing and statistics.

scope-picture-recursive

This scope recursive access to the complete $PICTURE folder, including sub directories and files.

scope-picture

This scope permits access to all files and list content of top level directories in the $PICTUREfolder.

scope-picture-index

This scope permits to list all files and folders in the $PICTUREfolder.

allow-public-read-recursive

This allows full recursive read access to the complete $PUBLIC folder, files and subdirectories.

allow-public-write-recursive

This allows full recusrive write access to the complete $PUBLIC folder, files and subdirectories.

allow-public-read

This allows non-recursive read access to the $PUBLIC folder.

allow-public-write

This allows non-recursive write access to the $PUBLIC folder.

allow-public-meta-recursive

This allows read access to metadata of the $PUBLIC folder, including file listing and statistics.

allow-public-meta

This allows read access to metadata of the $PUBLIC folder, including file listing and statistics.

scope-public-recursive

This scope recursive access to the complete $PUBLIC folder, including sub directories and files.

scope-public

This scope permits access to all files and list content of top level directories in the $PUBLICfolder.

scope-public-index

This scope permits to list all files and folders in the $PUBLICfolder.

allow-resource-read-recursive

This allows full recursive read access to the complete $RESOURCE folder, files and subdirectories.

allow-resource-write-recursive

This allows full recusrive write access to the complete $RESOURCE folder, files and subdirectories.

allow-resource-read

This allows non-recursive read access to the $RESOURCE folder.

allow-resource-write

This allows non-recursive write access to the $RESOURCE folder.

allow-resource-meta-recursive

This allows read access to metadata of the $RESOURCE folder, including file listing and statistics.

allow-resource-meta

This allows read access to metadata of the $RESOURCE folder, including file listing and statistics.

scope-resource-recursive

This scope recursive access to the complete $RESOURCE folder, including sub directories and files.

scope-resource

This scope permits access to all files and list content of top level directories in the $RESOURCEfolder.

scope-resource-index

This scope permits to list all files and folders in the $RESOURCEfolder.

allow-runtime-read-recursive

This allows full recursive read access to the complete $RUNTIME folder, files and subdirectories.

allow-runtime-write-recursive

This allows full recusrive write access to the complete $RUNTIME folder, files and subdirectories.

allow-runtime-read

This allows non-recursive read access to the $RUNTIME folder.

allow-runtime-write

This allows non-recursive write access to the $RUNTIME folder.

allow-runtime-meta-recursive

This allows read access to metadata of the $RUNTIME folder, including file listing and statistics.

allow-runtime-meta

This allows read access to metadata of the $RUNTIME folder, including file listing and statistics.

scope-runtime-recursive

This scope recursive access to the complete $RUNTIME folder, including sub directories and files.

scope-runtime

This scope permits access to all files and list content of top level directories in the $RUNTIMEfolder.

scope-runtime-index

This scope permits to list all files and folders in the $RUNTIMEfolder.

allow-temp-read-recursive

This allows full recursive read access to the complete $TEMP folder, files and subdirectories.

allow-temp-write-recursive

This allows full recusrive write access to the complete $TEMP folder, files and subdirectories.

allow-temp-read

This allows non-recursive read access to the $TEMP folder.

allow-temp-write

This allows non-recursive write access to the $TEMP folder.

allow-temp-meta-recursive

This allows read access to metadata of the $TEMP folder, including file listing and statistics.

allow-temp-meta

This allows read access to metadata of the $TEMP folder, including file listing and statistics.

scope-temp-recursive

This scope recursive access to the complete $TEMP folder, including sub directories and files.

scope-temp

This scope permits access to all files and list content of top level directories in the $TEMPfolder.

scope-temp-index

This scope permits to list all files and folders in the $TEMPfolder.

allow-template-read-recursive

This allows full recursive read access to the complete $TEMPLATE folder, files and subdirectories.

allow-template-write-recursive

This allows full recusrive write access to the complete $TEMPLATE folder, files and subdirectories.

allow-template-read

This allows non-recursive read access to the $TEMPLATE folder.

allow-template-write

This allows non-recursive write access to the $TEMPLATE folder.

allow-template-meta-recursive

This allows read access to metadata of the $TEMPLATE folder, including file listing and statistics.

allow-template-meta

This allows read access to metadata of the $TEMPLATE folder, including file listing and statistics.

scope-template-recursive

This scope recursive access to the complete $TEMPLATE folder, including sub directories and files.

scope-template

This scope permits access to all files and list content of top level directories in the $TEMPLATEfolder.

scope-template-index

This scope permits to list all files and folders in the $TEMPLATEfolder.

allow-video-read-recursive

This allows full recursive read access to the complete $VIDEO folder, files and subdirectories.

allow-video-write-recursive

This allows full recusrive write access to the complete $VIDEO folder, files and subdirectories.

allow-video-read

This allows non-recursive read access to the $VIDEO folder.

allow-video-write

This allows non-recursive write access to the $VIDEO folder.

allow-video-meta-recursive

This allows read access to metadata of the $VIDEO folder, including file listing and statistics.

allow-video-meta

This allows read access to metadata of the $VIDEO folder, including file listing and statistics.

scope-video-recursive

This scope recursive access to the complete $VIDEO folder, including sub directories and files.

scope-video

This scope permits access to all files and list content of top level directories in the $VIDEOfolder.

scope-video-index

This scope permits to list all files and folders in the $VIDEOfolder.

allow-copy-file

Enables the copy_file command without any pre-configured scope.

deny-copy-file

Denies the copy_file command without any pre-configured scope.

allow-create

Enables the create command without any pre-configured scope.

deny-create

Denies the create command without any pre-configured scope.

allow-exists

Enables the exists command without any pre-configured scope.

deny-exists

Denies the exists command without any pre-configured scope.

allow-fstat

Enables the fstat command without any pre-configured scope.

deny-fstat

Denies the fstat command without any pre-configured scope.

allow-ftruncate

Enables the ftruncate command without any pre-configured scope.

deny-ftruncate

Denies the ftruncate command without any pre-configured scope.

allow-lstat

Enables the lstat command without any pre-configured scope.

deny-lstat

Denies the lstat command without any pre-configured scope.

allow-mkdir

Enables the mkdir command without any pre-configured scope.

deny-mkdir

Denies the mkdir command without any pre-configured scope.

allow-open

Enables the open command without any pre-configured scope.

deny-open

Denies the open command without any pre-configured scope.

allow-read

Enables the read command without any pre-configured scope.

deny-read

Denies the read command without any pre-configured scope.

allow-read-dir

Enables the read_dir command without any pre-configured scope.

deny-read-dir

Denies the read_dir command without any pre-configured scope.

allow-read-file

Enables the read_file command without any pre-configured scope.

deny-read-file

Denies the read_file command without any pre-configured scope.

allow-read-text-file

Enables the read_text_file command without any pre-configured scope.

deny-read-text-file

Denies the read_text_file command without any pre-configured scope.

allow-read-text-file-lines

Enables the read_text_file_lines command without any pre-configured scope.

deny-read-text-file-lines

Denies the read_text_file_lines command without any pre-configured scope.

allow-read-text-file-lines-next

Enables the read_text_file_lines_next command without any pre-configured scope.

deny-read-text-file-lines-next

Denies the read_text_file_lines_next command without any pre-configured scope.

allow-remove

Enables the remove command without any pre-configured scope.

deny-remove

Denies the remove command without any pre-configured scope.

allow-rename

Enables the rename command without any pre-configured scope.

deny-rename

Denies the rename command without any pre-configured scope.

allow-seek

Enables the seek command without any pre-configured scope.

deny-seek

Denies the seek command without any pre-configured scope.

allow-stat

Enables the stat command without any pre-configured scope.

deny-stat

Denies the stat command without any pre-configured scope.

allow-truncate

Enables the truncate command without any pre-configured scope.

deny-truncate

Denies the truncate command without any pre-configured scope.

allow-unwatch

Enables the unwatch command without any pre-configured scope.

deny-unwatch

Denies the unwatch command without any pre-configured scope.

allow-watch

Enables the watch command without any pre-configured scope.

deny-watch

Denies the watch command without any pre-configured scope.

allow-write

Enables the write command without any pre-configured scope.

deny-write

Denies the write command without any pre-configured scope.

allow-write-file

Enables the write_file command without any pre-configured scope.

deny-write-file

Denies the write_file command without any pre-configured scope.

allow-write-text-file

Enables the write_text_file command without any pre-configured scope.

deny-write-text-file

Denies the write_text_file command without any pre-configured scope.

default

Tauri fs default permissions

This configuration file defines the default permissions granted to the filesystem.

Granted Permissions

This default permission set enables all read-related commands and allows access to the $APP folder and sub directories created in it. The location of the $APP folder depends on the operating system, where the application is run.

In general the $APP folder needs to be manually created by the application at runtime, before accessing files or folders in it is possible.

Denied Permissions

This default permission set prevents access to critical components of the Tauri application by default. On Windows the webview data folder access is denied.

deny-default

This denies access to dangerous Tauri relevant files and folders by default.

deny-webview-data-linux

This denies read access to the $APPLOCALDATA folder on linux as the webview data and configuration values are stored here. Allowing access can lead to sensitive information disclosure and should be well considered.

deny-webview-data-windows

This denies read access to the $APPLOCALDATA/EBWebView folder on windows as the webview data and configuration values are stored here. Allowing access can lead to sensitive information disclosure and should be well considered.

read-all

This enables all read related commands without any pre-configured accessible paths.

read-dirs

This enables directory read and file metadata related commands without any pre-configured accessible paths.

read-files

This enables file read related commands without any pre-configured accessible paths.

read-meta

This enables all index or metadata related commands without any pre-configured accessible paths.

scope

An empty permission you can use to modify the global scope.

write-all

This enables all write related commands without any pre-configured accessible paths.

write-files

This enables all file write related commands without any pre-configured accessible paths.