Security

Roles

Role	Typical authority
admin	All Action + Users / Settings / Audit
engineer	Read/Write/Publish/Compile/Activate (within policy)
viewer	Read
operator	Control plane Read; Studio HMI shell; operate uses a separate command token

Policy Action: Read, Write, Publish, Compile, Activate, Admin (crates/policy).

Folder ACL: principal_folder_grants.

Users

Admin: create, role/displayName/disabled, password reset, avatar, contact, account expiry, Unlock, folder grants.

Sessions and API tokens

• Sessions: list, revoke, revoke others
• API token: vion_at_*, stored as SHA-256; optional roleMax / scopes (viewer|engineer); rotate
• TTL: VION_API_TOKEN_TTL_HOURS / _DAYS

Certificates

Inventory list / upload / delete. No ACME / automatic renewal.

Audit

GET /api/v1/audit — type/from/to/limit; hash chain. Admin.

Break-glass / OIDC

Sign-in. No LDAP/SAML.