uid: Default pseudo-scope required for all authenticated clients
plexicus.account.write: Delete own account
plexicus.backoffice.admin: Full backoffice administration access (manage clients, backoffice users, partners, pricings, database maintenance, analytics)
plexicus.charts.read: Read dashboard and graph data
plexicus.client-subscriptions.admin: Administer client subscription plans
plexicus.client-team.read: Read client team invitations and members
plexicus.client-team.admin: Remove client team members
plexicus.client-team.write: Manage client team invitations and members
plexicus.clients.read: Read client records
plexicus.clients.write: Create or update client records
plexicus.findings.read: Read security findings
plexicus.findings.admin: Delete security findings
plexicus.findings.write: Create, update, or validate security findings
plexicus.issues.write: Create issues on SCM providers
plexicus.plexalyzer-tokens.write: Generate or revoke plexalyzer tokens
plexicus.plexalyzer-tokens.admin: Revoke plexalyzer tokens
plexicus.pull-requests.write: Create pull requests from remediations
plexicus.reference-data.read: Read static reference data (finding types, OWASP categories, scanners, SCM providers, supply chain categories)
plexicus.remediations.read: Read remediation records
plexicus.remediations.write: Generate or update remediation records
plexicus.repositories.read: Read repositories
plexicus.repositories.admin: Delete repositories
plexicus.repositories.write: Create, update, or delete repositories
plexicus.repository-scans.write: Request, upload, or receive repository scans
plexicus.repository-webhooks.write: Create or receive repository webhook events
plexicus.billing.read: Read end-user billing data (invoices, customer info, subscription status)
plexicus.billing.write: Manage end-user billing (checkout sessions, subscription actions, customer data)
plexicus.billing-plans.read: Read platform billing plans and meter usage
plexicus.billing-plans.write: Manage platform billing plans, products, and meter configuration
plexicus.billing.admin: Pay, buy add-ons, change or cancel the subscription
plexicus.ticketing-integrations.admin: Administer ticketing service integrations
plexicus.ticketing-integrations.read: Read ticketing service integrations
plexicus.tickets.read: Read tickets
plexicus.tickets.write: Create, update, close, or comment on tickets
plexicus.scm-integrations.read: Read SCM provider integration config
plexicus.scm-integrations.write: Manage SCM provider integrations and tokens
plexicus.user-connectors.read: Read user connectors
plexicus.user-connectors.write: Create, update, or delete user connectors
plexicus.user-connectors.admin: Define, edit, delete and register custom tool connectors
plexicus.users.read: Read developer users
plexicus.roles.read: Read role catalog
plexicus.roles.admin: Administer role catalog
plexicus.role-assignments.write: Assign or revoke roles for users
plexicus.role-assignments.admin: Revoke roles from users
plexicus.permissions.read: Read permission catalog
plexicus.audit-logs.read: Read audit log entries
plexicus.audit-logs.verify: Verify audit log chain integrity
plexicus.client-connectors.admin: Remove client connector configurations
plexicus.scm-connections.admin: Delete SCM connections
plexicus.pentests.admin: Delete pentests
plexicus.repository-tools-config.admin: Delete repository scanner settings
plexicus.sso-scim-tokens-rotate.admin: Rotate SCIM tokens