general_user
Read-only public access until explicitly elevated.
Admin
Roles
Application-level role policy enforcement overview for v0.3.0.
learner
view_courses, submit_quizzes, submit_labs, view_own_certificates
associate
Read-only public access until explicitly elevated.
engineer
Read-only public access until explicitly elevated.
instructor
create_drafts, edit_own_content, submit_for_review, view_learning_metrics
certification_reviewer
review_exam_attempts, review_lab_submissions, issue_recommendations
admin
manage_content, manage_users, assign_roles, view_audit_logs
superadmin
manage_platform, rotate_keys, configure_integrations, override_roles