Persona cells: scope × intent
The cells that decide your menu: which intent is populated in each scope, which key gets you in, and how many keys its package holds.
For: Platform administrator, Builder, Account administrator, Tenant administrator, Operator, Auditor, Member
What a cell is
A persona is the intersection of a scope and an intent. Of 3 scopes and 5 intents, 12 cells are populated. A person's menu is made of the cells they hold in the scope they are in: a cell appears in the menu when you hold its entry key and (for cells with actions) at least one action key.
Populated cells
| Scope | Intent | What for | Entry key | Package |
|---|---|---|---|---|
| Platform | build (Studios in the menu) | Building capabilities and solutions | capability.read | 14 keys |
| Platform | govern (Governance in the menu) | Policy floors, roles, platform configuration | role.read | 13 keys |
| Platform | operate (Operations in the menu) | Runtime, health and incidents | operations.read | 8 keys |
| Platform | audit (Assurance in the menu) | Platform audit | audit.read | 18 keys |
| Account | build (Studios in the menu) | Publishing to the account's own tenants | capability.read | 14 keys |
| Account | govern (Governance in the menu) | Tenant lifecycle, people, roles | role.read | 11 keys |
| Account | audit (Assurance in the menu) | Account audit | — | not defined yet |
| Tenant | build (Studios in the menu) | Installing applications from the catalog | — | not defined yet |
| Tenant | govern (Governance in the menu) | Tenant configuration, members, teams | capability.read | 11 keys |
| Tenant | operate (Operations in the menu) | Workspace operations and data | — | not defined yet |
| Tenant | use (Work in the menu) | Business user | record.read | 4 keys |
| Tenant | audit (Assurance in the menu) | Tenant audit | audit.read | 18 keys |
Tip A cell whose package is “not defined yet” exists in the product but does not declare any permission package yet; so it doesn't appear in anyone's menu.
Empty cells
| Scope | Intent | Why it is empty |
|---|---|---|
| Platform | use | Nobody uses an application in the platform scope. |
| Account | operate | An account governs; it doesn't run workloads. |
| Account | use | The same reason as in the platform scope. |