[
  {
    "apiName": "ApiEnabled",
    "label": "API Enabled",
    "category": "Administrative",
    "description": "Allows API access",
    "defaultGrantedTo": [
      "SystemAdmin",
      "StandardUser"
    ]
  },
  {
    "apiName": "ModifyAllData",
    "label": "Modify All Data",
    "category": "Administrative",
    "description": "Full data access",
    "defaultGrantedTo": [
      "SystemAdmin"
    ],
    "requires": "ViewAllData"
  },
  {
    "apiName": "ViewAllData",
    "label": "View All Data",
    "category": "Administrative",
    "description": "View all records",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "CustomizeApplication",
    "label": "Customize Application",
    "category": "Administrative",
    "description": "Modify app metadata",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageUsers",
    "label": "Manage Users",
    "category": "UserManagement",
    "description": "Create/edit users",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageRoles",
    "label": "Manage Roles",
    "category": "UserManagement",
    "description": "Manage role hierarchy",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageProfilesPermSets",
    "label": "Manage Profiles and Permission Sets",
    "category": "UserManagement",
    "description": "Edit profiles/permsets",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "AssignPermissionSets",
    "label": "Assign Permission Sets",
    "category": "UserManagement",
    "description": "Assign permsets to users",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageSharing",
    "label": "Manage Sharing",
    "category": "Administrative",
    "description": "Manage sharing rules",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ResetPasswords",
    "label": "Reset User Passwords",
    "category": "UserManagement",
    "description": "Reset passwords/unlock users",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ViewSetup",
    "label": "View Setup and Configuration",
    "category": "Administrative",
    "description": "View setup pages",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ViewAllUsers",
    "label": "View All Users",
    "category": "UserManagement",
    "description": "View all user records",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageExternalUsers",
    "label": "Manage External Users",
    "category": "UserManagement",
    "description": "Manage external/community users",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "PasswordNeverExpires",
    "label": "Password Never Expires",
    "category": "UserManagement",
    "description": "Exempt from password expiration",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "UseIdentityFeatures",
    "label": "Use Identity Features",
    "category": "UserManagement",
    "description": "Use identity provider features",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "BulkApiHardDelete",
    "label": "Bulk API Hard Delete",
    "category": "Data",
    "description": "Permanently delete via Bulk API",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ExportReport",
    "label": "Export Reports",
    "category": "ReportsDashboards",
    "description": "Export report data",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "MassInlineEdit",
    "label": "Mass Inline Edit",
    "category": "Data",
    "description": "Mass edit from list views",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "DataExport",
    "label": "Weekly Data Export",
    "category": "Data",
    "description": "Export data weekly",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "TransferAnyEntity",
    "label": "Transfer Record",
    "category": "Data",
    "description": "Transfer record ownership",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "RunReports",
    "label": "Run Reports",
    "category": "ReportsDashboards",
    "description": "Execute reports",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "CreateCustomizeReports",
    "label": "Create and Customize Reports",
    "category": "ReportsDashboards",
    "description": "Build custom reports",
    "defaultGrantedTo": [
      "SystemAdmin",
      "StandardUser"
    ]
  },
  {
    "apiName": "ManageReportsInPubFolders",
    "label": "Manage Reports in Public Folders",
    "category": "ReportsDashboards",
    "description": "Manage public report folders",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageDashbdsInPubFolders",
    "label": "Manage Dashboards in Public Folders",
    "category": "ReportsDashboards",
    "description": "Manage public dashboards",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "CreateDashboards",
    "label": "Create and Customize Dashboards",
    "category": "ReportsDashboards",
    "description": "Build dashboards",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ScheduleReports",
    "label": "Schedule Reports",
    "category": "ReportsDashboards",
    "description": "Schedule report runs",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "EditDashboards",
    "label": "Edit My Dashboards",
    "category": "ReportsDashboards",
    "description": "Edit personal dashboards",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ViewMyTeamsDashboards",
    "label": "View My Team's Dashboards",
    "category": "ReportsDashboards",
    "description": "View team dashboards",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "RunFlow",
    "label": "Run Flows",
    "category": "FlowAutomation",
    "description": "Execute flows",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageFlows",
    "label": "Manage Flows",
    "category": "FlowAutomation",
    "description": "Create/edit flows",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ViewFlowDefinition",
    "label": "View Flow Definitions",
    "category": "FlowAutomation",
    "description": "View flow metadata",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageScheduledFlows",
    "label": "Manage Scheduled Flows",
    "category": "FlowAutomation",
    "description": "Manage scheduled flows",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "DebugFlows",
    "label": "Debug Flows",
    "category": "FlowAutomation",
    "description": "Debug flow execution",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageActions",
    "label": "Manage Actions",
    "category": "FlowAutomation",
    "description": "Manage record actions",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageApprovalProcesses",
    "label": "Manage Approval Processes",
    "category": "FlowAutomation",
    "description": "Configure approvals",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ModifyMetadata",
    "label": "Modify Metadata",
    "category": "SchemaMetadata",
    "description": "Modify via Metadata API",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageCustomPermissions",
    "label": "Manage Custom Permissions",
    "category": "SchemaMetadata",
    "description": "Create custom permissions",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageCustomLabels",
    "label": "Manage Custom Labels",
    "category": "SchemaMetadata",
    "description": "Manage labels",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "EmailSingle",
    "label": "Send Email",
    "category": "Email",
    "description": "Send individual emails",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "EmailMass",
    "label": "Mass Email",
    "category": "Email",
    "description": "Send mass emails",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "EmailTemplateManagement",
    "label": "Manage Email Templates",
    "category": "Email",
    "description": "Create/edit email templates",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "CreateCustomizeFilters",
    "label": "Create and Customize List Views",
    "category": "ListViews",
    "description": "Create list views",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "EditPublicFilters",
    "label": "Manage Public List Views",
    "category": "ListViews",
    "description": "Edit public list views",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageContentPermissions",
    "label": "Manage Content Permissions",
    "category": "ContentFiles",
    "description": "Manage file permissions",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageContentProperties",
    "label": "Manage Content Properties",
    "category": "ContentFiles",
    "description": "Manage file properties",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "CreateContentSpace",
    "label": "Create Libraries",
    "category": "ContentFiles",
    "description": "Create content libraries",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ViewSetupAuditTrail",
    "label": "View Setup Audit Trail",
    "category": "AuditCompliance",
    "description": "View setup changes",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ViewDataLeakageEvents",
    "label": "View Data Leakage Events",
    "category": "AuditCompliance",
    "description": "View DLP events",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ViewEventLogFiles",
    "label": "View Event Log Files",
    "category": "AuditCompliance",
    "description": "View event logs",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ViewFieldAuditTrail",
    "label": "View Field History",
    "category": "AuditCompliance",
    "description": "View field audit trail",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "LightningExperienceUser",
    "label": "Lightning Experience User",
    "category": "Platform",
    "description": "Access Lightning UI",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "QueryAllFiles",
    "label": "Query All Files",
    "category": "Integration",
    "description": "Query all file records",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ViewPlatformEvents",
    "label": "View Platform Events",
    "category": "Integration",
    "description": "View platform events",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "PublishPlatformEvents",
    "label": "Publish Platform Events",
    "category": "Integration",
    "description": "Publish platform events",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageConnectedApps",
    "label": "Manage Connected Apps",
    "category": "Integration",
    "description": "Manage connected apps",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageOAuthApps",
    "label": "Manage OAuth Apps",
    "category": "Integration",
    "description": "Manage OAuth applications",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ManageNamedCredentials",
    "label": "Manage Named Credentials",
    "category": "Integration",
    "description": "Manage outbound named credential definitions and rotate their secret values.",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ViewConnectorHealth",
    "label": "View Connector Health",
    "category": "Integration",
    "description": "View per-connector sync state and health view (NCRM-INT-05a).",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ViewConnectorDiagnostics",
    "label": "View Connector Diagnostics",
    "category": "Integration",
    "description": "View per-record connector sync diagnostics: destination lineage (connector owner, action type, destination slot) and last-attempt status (#2107).",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "EditPublicDocuments",
    "label": "Edit Public Documents",
    "category": "ObjectOperations",
    "description": "Edit public document records",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "EditReadonlyFields",
    "label": "Edit Read-Only Fields",
    "category": "ObjectOperations",
    "description": "Edit fields marked as read-only",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ViewConnectorEvents",
    "label": "View Connector Events",
    "category": "Integration",
    "description": "View dead-letter queue entries for connector events",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ReplayConnectorEvents",
    "label": "Replay Connector Events",
    "category": "Integration",
    "description": "Replay dead-letter queue entries for connector events",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ViewOutboundDeliveries",
    "label": "View Outbound Deliveries",
    "category": "Integration",
    "description": "View the outbound email/webhook delivery attempt log",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  },
  {
    "apiName": "ResendOutboundDeliveries",
    "label": "Resend Outbound Deliveries",
    "category": "Integration",
    "description": "Resend a recorded outbound email/webhook delivery attempt",
    "defaultGrantedTo": [
      "SystemAdmin"
    ]
  }
]