locals {
  granted_permissions = [
    # ---- API & Application Keys ---------------------------------------------
    "api_keys_read",
    "client_tokens_read",
    "client_tokens_write",
    "user_app_keys",
    "org_app_keys_read",

    # ---- Monitors -----------------------------------------------------------
    "monitors_read",
    "monitors_write",
    "monitors_downtime",
    "monitor_config_policy_write",

    # ---- Dashboards ---------------------------------------------------------
    "dashboards_read",
    "dashboards_write",
    "dashboards_invite_share",
    "dashboards_embed_share",
    "embeddable_graphs_share",
    "generate_dashboard_reports",
    "product_dashboards_write",
    "dashboards_public_share",

    # ---- Notebooks ----------------------------------------------------------
    "notebooks_read",
    "notebooks_write",

    # ---- Service Level Objectives -------------------------------------------
    "slos_read",
    "slos_write",
    "slos_corrections",

    # ---- APM / Service Catalog / API Catalog --------------------------------
    "apm_read",
    "apm_retention_filter_read",
    "apm_retention_filter_write",
    "apm_service_ingest_read",
    "apm_service_ingest_write",
    "apm_apdex_manage_write",
    "apm_tag_management_write",
    "apm_primary_operation_write",
    "apm_generate_metrics",
    "apm_pipelines_read",
    "apm_pipelines_write",
    "apm_service_catalog_read",
    "apm_service_catalog_write",
    "apm_api_catalog_read",
    "apm_api_catalog_write",
    "apm_remote_configuration_read",
    "apm_remote_configuration_write",
    "apm_workload_selection_read",
    "apm_workload_selection_write",
    "apm_service_renaming_write",
    "continuous_profiler_read",
    "continuous_profiler_pgo_read",
    "debugger_read",
    "debugger_write",
    "debugger_write_pre_prod",
    "debugger_capture_variables",

    # ---- Error Tracking -----------------------------------------------------
    "error_tracking_read",
    "error_tracking_write",
    "error_tracking_settings_write",
    "error_tracking_exclusion_filters_write",

    # ---- Log Management -----------------------------------------------------
    "logs_read_data",
    "logs_read_archives",
    "logs_read_config",
    "logs_read_index_data",
    "logs_read_workspaces",
    "logs_live_tail",
    "logs_modify_indexes",
    "logs_write_exclusion_filters",
    "logs_write_pipelines",
    "logs_write_processors",
    "logs_write_archives",
    "logs_write_forwarding_rules",
    "logs_write_historical_view",
    "logs_write_facets",
    "logs_write_workspaces",
    "logs_generate_metrics",
    "flex_logs_config_write",
    "logs_delete_data",

    # ---- Metrics ------------------------------------------------------------
    "metric_tags_write",
    "host_tags_write",
    "metrics_metadata_write",

    # ---- Integrations -------------------------------------------------------
    "integrations_read",
    "manage_integrations",
    "aws_configuration_read",
    "gcp_configuration_read",
    "repo_info_read",

    # ---- Synthetic Monitoring -----------------------------------------------
    "synthetics_read",
    "synthetics_write",
    "synthetics_global_variable_read",
    "synthetics_global_variable_write",
    "synthetics_private_location_read",
    "synthetics_private_location_write",
    "synthetics_default_settings_read",
    "synthetics_default_settings_write",

    # ---- Real User Monitoring -----------------------------------------------
    "rum_apps_read",
    "rum_apps_write",
    "rum_session_replay_read",
    "rum_generate_metrics",
    "rum_playlist_write",
    "rum_extend_retention",
    "rum_retention_filters_read",
    "rum_retention_filters_write",
    "rum_settings_write",

    # ---- Infrastructure -----------------------------------------------------
    "cloudcraft_read",
    "infrastructure_resource_policies_read",
    "infrastructure_resource_policies_write",

    # ---- Containers / Processes / Serverless --------------------------------
    "containers_generate_image_metrics",
    "processes_generate_metrics",
    "process_tags_read",
    "process_tags_write",
    "serverless_aws_instrumentation_read",
    "serverless_aws_instrumentation_write",

    # ---- Database Monitoring ------------------------------------------------
    "dbm_read",
    "dbm_parameterized_queries_read",

    # ---- Events -------------------------------------------------------------
    "event_correlation_config_read",
    "event_correlation_config_write",
    "event_config_write",
    "events_write_pipelines",
    "events_write_processors",

    # ---- Cloud Security Platform / Application Security ----------------------
    "security_monitoring_rules_read",
    "security_monitoring_rules_write",
    "security_monitoring_signals_read",
    "security_monitoring_signals_write",
    "security_monitoring_filters_read",
    "security_monitoring_filters_write",
    "security_monitoring_notification_profiles_read",
    "security_monitoring_notification_profiles_write",
    "security_monitoring_findings_read",
    "security_monitoring_findings_write",
    "security_monitoring_suppressions_read",
    "security_monitoring_suppressions_write",
    "security_monitoring_datasets_read",
    "security_monitoring_datasets_write",
    "security_comments_read",
    "security_comments_write",
    "security_pipelines_read",
    "security_pipelines_write",
    "appsec_event_rule_read",
    "appsec_event_rule_write",
    "appsec_protect_read",
    "appsec_protect_write",
    "appsec_activation_read",
    "appsec_activation_write",
    "appsec_vm_read",
    "appsec_vm_write",

    # ---- Cloud Cost Management ----------------------------------------------
    "cloud_cost_management_read",
    "cloud_cost_management_write",
    "generate_ccm_report_schedules",
    "manage_ccm_report_schedules",
    "ccm_budget_write",
    "ccm_forecast_write",

    # ---- On-Call ------------------------------------------------------------
    "on_call_read",
    "on_call_write",
    "on_call_page",
    "on_call_respond",

    # ---- Case & Incident Management -----------------------------------------
    "incident_read",
    "incident_write",
    "incident_settings_read",
    "incident_settings_write",
    "incidents_private_global_access",
    "incident_notification_settings_read",
    "incident_notification_settings_write",
    "cases_read",
    "cases_write",
    "cases_shared_settings_write",

    # ---- App Builder & Workflow Automation ----------------------------------
    "workflows_read",
    "workflows_write",
    "workflows_run",
    "connections_read",
    "connections_write",
    "connections_resolve",
    "connection_groups_read",
    "connection_groups_write",
    "apps_run",
    "apps_write",
    "apps_datastore_read",
    "apps_datastore_write",
    "apps_datastore_manage",
    "apps_form_read",
    "apps_form_manage",
    "actions_interface_run",
    "execution_groups_read",
    "execution_groups_write",
    "on_prem_runner_read",
    "on_prem_runner_use",
    "on_prem_runner_write",

    # ---- Software Delivery (CI Visibility) ----------------------------------
    "ci_visibility_read",
    "ci_visibility_write",
    "ci_visibility_pipelines_write",
    "ci_visibility_settings_write",
    "ci_provider_settings_write",
    "ci_ingestion_control_write",

    # ---- Test Optimization & Quality Gates ----------------------------------
    "test_optimization_read",
    "test_optimization_write",
    "test_optimization_settings_write",
    "intelligent_test_runner_activation_write",
    "intelligent_test_runner_settings_write",
    "quality_gate_rules_read",
    "quality_gate_rules_write",
    "quality_gates_evaluations_read",

    # ---- Code Analysis: SAST + SCA ------------------------------------------
    "code_analysis_read",
    "code_coverage_read",
    "static_analysis_settings_write",

    # ---- DORA Metrics -------------------------------------------------------
    "dora_metrics_read",
    "dora_metrics_write",
    "dora_settings_write",

    # ---- Network Performance Monitoring -------------------------------------
    "network_connections_read",
    "network_health_insights_read",

    # ---- Bits AI / Assistant / Agent Builder --------------------------------
    "assistant_access",
    "bits_dev_write",
    "bits_investigations_read",
    "bits_investigations_write",
    "agent_builder_read",
    "agent_builder_run",
    "agent_builder_write",
    "agent_builder_external_mcp_resolve",
    "agent_builder_external_mcp_write",
    "ai_guard_view",
    "ai_guard_evaluate",
    "mcp_read",
    "mcp_write",

    # ---- Reference Tables ---------------------------------------------------
    "reference_tables_read",
    "reference_tables_write",
  ]
}