Registry & Profiles
The AccessRegistry stores users, groups, custom roles, and agent profiles. Permission resolution merges role defaults with group and user-level overrides.
Registry Contents
| Store | Key | Value Type |
|---|---|---|
| users | UserId | UserProfile (display_name, role, overrides, group_ids, enabled) |
| groups | GroupId | Group (role, overrides, entity_scope, member_user_ids, member_agent_ids) |
| custom_roles | CustomRoleId | CustomRoleDefinition (base_role, permissions) |
| agent_profiles | AgentProfileId | AgentProfile (agent_type, role, overrides, entity_scope) |
Agent Types
| Type | Presets |
|---|---|
| Llm | ReadOnly, Operator, Full, Custom |
| Control | Named agent_id (e.g. "hvac_controller") |
Permission Resolution
Text
// Resolution order (later overrides earlier):
// 1. User role → default_permissions()
// 2. Group role → default_permissions()
// 3. Group permission_overrides
// 4. User permission_overrides
//
// For agents: profile role + profile overridesQuestions?
Reach out for help with integration, deployment, or custom domain codecs.