RBAC permissions

This page documents which roles can access which GraphQL operations.

Note: For each operation type (Query, Mutation, etc.), a rule marked as * acts as a default. Any field not explicitly listed will inherit the permissions of the * rule. This ensures new or unlisted fields are not accidentally left unprotected.

Below you will find tables for Query, Mutation, and types/fields, showing which user and app roles are required for each.

Note:

All role names are shown without the VerifiableCredential. or AcquireLimitedAccessToken. prefix.

Some columns (such as internal roles) are hidden to keep the table readable and focused on the most relevant permissions for typical users.

Long rule names are abbreviated, e.g.:

hasApprovalRequestPresentationAndMatchesApprovalRequestId → hasApprovalReqPresMatchId

issuanceIsToAuthenticatedUser → issuanceIsToAuthUser

The Rule column shows the full access rule for each field, including all required roles and logical conditions.

Queries

Field	UserRoles	AppRoles	Limited Access Token Roles	Rule
`Query.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	-	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin
`Query.accessPackages`	Credential admin	-	-	Show CredentialAdmin
`Query.actionedApprovalData`	Approval request admin	Approval request integration	-	Show ApprovalRequestAdmin `OR` RequestApproval
`Query.applicationLabelConfigs`	Instance admin	-	-	Show InstanceAdmin
`Query.approvalRequest`	Approval request admin	-	-	Show ApprovalRequestAdmin `OR` (LimitedApproval `AND` hasApprovalReqPresMatchId)
`Query.approvalRequestTypes`	Approval request admin	-	-	Show ApprovalRequestAdmin
`Query.asyncIssuanceContact`	Issuer, Support agent	-	-	Show Issuer `OR` SupportAgent
`Query.asyncIssuanceRequest`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` SupportAgent) `OR` Issuee
`Query.authority`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	-	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issuee
`Query.conciergeBranding`	*	*	*	Anyone
`Query.contract`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent) `OR` Issue `OR` Present `OR` ContractAdmin `OR` (LimitedAccess `AND` isValidLimitedContractRequest)
`Query.corsOriginConfigs`	Instance admin	-	-	Show InstanceAdmin
`Query.discovery`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	-	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent) `OR` Issuee
`Query.emailSenderConfig`	Instance admin	-	-	Show InstanceAdmin
`Query.findApprovalRequests`	Approval request admin	-	-	Show ApprovalRequestAdmin
`Query.findAsyncIssuanceRequests`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` (LimitedAccess `AND` (isRequestIdFilterDefined `OR` isValidLimitedIdentitierFilter)) `OR` (LimitedAsyncIssuance `AND` isRequestIdFilterDefined) `OR` SupportAgent
`Query.findCommunications`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	-	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent
`Query.findContracts`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent) `OR` Issue `OR` Present `OR` ContractAdmin `OR` (LimitedAccess `AND` hasLimitedAccessData-listContracts)
`Query.findIdentities`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	-	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent
`Query.findIdentityStores`	Instance admin, Issuer, Credential admin	Credential issuance	Issue, Present, ListContracts	Show InstanceAdmin `OR` (Issuer `OR` Issue `OR` (LimitedAccess `AND` hasLimitedAccessData-limitedIssuance) `OR` CredentialAdmin `OR` AcquireLimitedAccessToken.Issue `OR` AcquireLimitedAccessToken.Present `OR` AcquireLimitedAccessToken.ListContracts)
`Query.findIssuances`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` (LimitedAccess `AND` (isRequestIdFilterDefined `OR` isValidLimitedIdentitierFilter)) `OR` (LimitedAsyncIssuance `AND` isRequestIdFilterDefined) `OR` SupportAgent
`Query.findNetworkIssuers`	Partner admin	-	-	Show PartnerAdmin
`Query.findOidcClaimMappings`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	-	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin
`Query.findOidcClients`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	-	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin
`Query.findOidcResources`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	-	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin
`Query.findPresentations`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential presentation	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Present `OR` (LimitedAccess `AND` (isRequestIdFilterDefined `OR` isValidLimitedIdentitierFilter)) `OR` (LimitedApproval `AND` isRequestIdFilterDefined) `OR` (LimitedOidcAuthn `AND` isRequestIdFilterDefined) `OR` SupportAgent
`Query.findTemplates`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	Contract admin	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` ContractAdmin
`Query.findWallets`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential presentation	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Present `OR` (LimitedAccess `AND` (isRequestIdFilterDefined `OR` isValidLimitedIdentitierFilter)) `OR` (LimitedApproval `AND` isRequestIdFilterDefined) `OR` (LimitedOidcAuthn `AND` isRequestIdFilterDefined) `OR` SupportAgent
`Query.healthcheck`	*	*	*	Anyone
`Query.identitiesByIdentifiers`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance	Issue, Present, ListContracts	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent) `OR` Issue `OR` (LimitedAccess `AND` hasLimitedAccessData-limitedIssuance) `OR` AcquireLimitedAccessToken.Issue `OR` AcquireLimitedAccessToken.Present `OR` AcquireLimitedAccessToken.ListContracts
`Query.identity`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent) `OR` Issue `OR` Present `OR` (LimitedAccess `AND` isValidLimitedIdentityRequest)
`Query.identityByIdentifier`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance	Issue, Present, ListContracts	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent) `OR` Issue `OR` (LimitedAccess `AND` hasLimitedAccessData-limitedIssuance) `OR` AcquireLimitedAccessToken.Issue `OR` AcquireLimitedAccessToken.Present `OR` AcquireLimitedAccessToken.ListContracts
`Query.identityStore`	Instance admin, Issuer, Credential admin	Credential issuance	Issue, Present, ListContracts	Show InstanceAdmin `OR` (Issuer `OR` Issue `OR` (LimitedAccess `AND` hasLimitedAccessData-limitedIssuance) `OR` CredentialAdmin `OR` AcquireLimitedAccessToken.Issue `OR` AcquireLimitedAccessToken.Present `OR` AcquireLimitedAccessToken.ListContracts)
`Query.issuance`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` (LimitedAccess `AND` (isRequestIdFilterDefined `OR` isValidLimitedIdentitierFilter)) `OR` (LimitedAsyncIssuance `AND` isRequestIdFilterDefined) `OR` SupportAgent) `OR` Issuee
`Query.issuanceCount`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	-	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent
`Query.issuanceCountByUser`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	-	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent
`Query.me`	*	*	*	Anyone
`Query.networkContracts`	Partner admin	-	-	Show PartnerAdmin
`Query.oidcClient`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	-	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin
`Query.photoCaptureStatus`	Issuer	Credential issuance	-	Show (Issuer `OR` Issue `OR` (LimitedAccess `AND` hasLimitedAccessData-limitedIssuance)) `OR` (LimitedAsyncIssuance `AND` asyncIssuanceRequiresPhotoCapture)
`Query.presentation`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	-	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent
`Query.presentationCount`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	-	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent
`Query.presentationCountByUser`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	-	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent
`Query.template`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	Contract admin	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` ContractAdmin
`Query.templateCombinedData`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	Contract admin	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` ContractAdmin
`Query.testIdentityStoreGraphClient`	Instance admin	-	-	Show InstanceAdmin
`Query.verifyPresentation`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential presentation	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Present `OR` (LimitedAccess `AND` (isRequestIdFilterDefined `OR` isValidLimitedIdentitierFilter)) `OR` (LimitedApproval `AND` isRequestIdFilterDefined) `OR` (LimitedOidcAuthn `AND` isRequestIdFilterDefined) `OR` SupportAgent
`Query.wallet`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential presentation	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Present `OR` (LimitedAccess `AND` (isRequestIdFilterDefined `OR` isValidLimitedIdentitierFilter)) `OR` (LimitedApproval `AND` isRequestIdFilterDefined) `OR` (LimitedOidcAuthn `AND` isRequestIdFilterDefined) `OR` SupportAgent

Mutations

Field	UserRoles	AppRoles	Limited Access Token Roles	Rule
`Mutation.*`	Credential admin	-	-	Show CredentialAdmin
`Mutation.acquireAsyncIssuanceToken`	*	*	*	Anyone
`Mutation.acquireLimitedAccessToken`	-	-	Issue, Present, ListContracts, AnonymousPresentations	Show AcquireLimitedAccessToken.Issue `OR` AcquireLimitedAccessToken.Present `OR` AcquireLimitedAccessToken.ListContracts `OR` AcquireLimitedAccessToken.AnonymousPresentations `AND` isValidAcquireLimitedAccessTokenRequest
`Mutation.acquireLimitedApprovalToken`	*	*	*	Anyone
`Mutation.acquireLimitedPhotoCaptureToken`	*	*	*	Anyone
`Mutation.actionApprovalRequest`	-	-	-	Show LimitedApproval `AND` hasApprovalReqPresMatchId
`Mutation.cancelApprovalRequest`	Approval request admin	Approval request integration	-	Show ApprovalRequestAdmin `OR` RequestApproval
`Mutation.cancelAsyncIssuanceRequest`	Issuer, Support agent	Credential issuance	-	Show (Issuer `OR` Issue) `OR` SupportAgent
`Mutation.cancelAsyncIssuanceRequests`	Issuer, Support agent	Credential issuance	-	Show (Issuer `OR` Issue) `OR` SupportAgent
`Mutation.capturePhoto`	-	-	-	Show (LimitedPhotoCapture `OR` (LimitedAsyncIssuance `AND` asyncIssuanceRequiresPhotoCapture)) `AND` isValidCapturePhotoRequestId
`Mutation.createApprovalRequest`	-	Approval request integration	-	Show RequestApproval
`Mutation.createAsyncIssuanceRequest`	Issuer	Credential issuance	-	Show Issuer `OR` Issue
`Mutation.createContract`	Credential admin	Contract admin	-	Show CredentialAdmin `OR` ContractAdmin
`Mutation.createIdentityStore`	Instance admin	-	-	Show InstanceAdmin
`Mutation.createIssuanceRequest`	Issuer	Credential issuance	-	Show Issuer `OR` Issue `OR` ((LimitedAccess `AND` hasLimitedAccessData-limitedIssuance) `AND` isValidLimitedIssuanceRequest)
`Mutation.createIssuanceRequestForAsyncIssuance`	-	-	-	Show Issuee `OR` (LimitedAsyncIssuance `AND` hasCorrectCreateIssuanceRequestForAsyncIssuanceArgs)
`Mutation.createMDocPresentationRequest`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	Credential presentation	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Present `OR` ((LimitedAccess `AND` hasLimitedAccessData-limitedPresentation) `AND` isValidLimitedMdocPresentationRequest)
`Mutation.createOidcClaimMapping`	OIDC admin	-	-	Show OidcAdmin
`Mutation.createOidcClient`	OIDC admin	-	-	Show OidcAdmin
`Mutation.createOidcClientResource`	OIDC admin	-	-	Show OidcAdmin
`Mutation.createOidcResource`	OIDC admin	-	-	Show OidcAdmin
`Mutation.createPartner`	Partner admin	-	-	Show PartnerAdmin
`Mutation.createPhotoCaptureRequest`	Issuer	Credential issuance	-	Show Issuer `OR` Issue `OR` ((LimitedAccess `AND` hasLimitedAccessData-limitedIssuance) `AND` isValidLimitedIssuancePhotoCaptureRequest)
`Mutation.createPresentationRequest`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	Credential presentation	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Present `OR` ((LimitedAccess `AND` hasLimitedAccessData-limitedPresentation) `AND` isValidLimitedPresentationRequest)
`Mutation.createPresentationRequestForApproval`	-	-	-	Show LimitedApproval `AND` isValidLimitedPresentationRequestForApproval
`Mutation.createPresentationRequestForAuthn`	-	-	-	Show LimitedOidcAuthn `AND` isValidOidcAuthnPresentationRequest
`Mutation.createTemplate`	Credential admin	Contract admin	-	Show CredentialAdmin `OR` ContractAdmin
`Mutation.deleteConciergeBranding`	Instance admin	-	-	Show InstanceAdmin
`Mutation.deleteContract`	Credential admin	Contract admin	-	Show CredentialAdmin `OR` ContractAdmin
`Mutation.deleteIdentities`	Issuer, Credential admin	Credential issuance	Issue, Present, ListContracts	Show Issuer `OR` Issue `OR` (LimitedAccess `AND` hasLimitedAccessData-limitedIssuance) `OR` CredentialAdmin `OR` AcquireLimitedAccessToken.Issue `OR` AcquireLimitedAccessToken.Present `OR` AcquireLimitedAccessToken.ListContracts
`Mutation.deleteOidcClaimMapping`	OIDC admin	-	-	Show OidcAdmin
`Mutation.deleteOidcClient`	OIDC admin	-	-	Show OidcAdmin
`Mutation.deleteOidcClientResource`	OIDC admin	-	-	Show OidcAdmin
`Mutation.deleteOidcResource`	OIDC admin	-	-	Show OidcAdmin
`Mutation.deleteTemplate`	Credential admin	Contract admin	-	Show CredentialAdmin `OR` ContractAdmin
`Mutation.deprecateContract`	Credential admin	Contract admin	-	Show CredentialAdmin `OR` ContractAdmin
`Mutation.generateOidcClientSecret`	OIDC admin	-	-	Show OidcAdmin
`Mutation.import`	Credential admin	Contract admin	-	Show CredentialAdmin `OR` ContractAdmin
`Mutation.processMDocPresentationResponse`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	Credential presentation	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Present `OR` ((LimitedAccess `AND` hasLimitedAccessData-limitedPresentation) `AND` isValidLimitedMdocPresentationRequest)
`Mutation.provisionContract`	Credential admin	Contract admin	-	Show CredentialAdmin `OR` ContractAdmin
`Mutation.resendAsyncIssuanceNotification`	Issuer, Support agent	Credential issuance	-	Show (Issuer `OR` Issue) `OR` SupportAgent
`Mutation.resendAsyncIssuanceNotifications`	Issuer, Support agent	Credential issuance	-	Show (Issuer `OR` Issue) `OR` SupportAgent
`Mutation.resumeIdentityStore`	Instance admin	-	-	Show InstanceAdmin
`Mutation.resumePartner`	Partner admin	-	-	Show PartnerAdmin
`Mutation.revokeContractIssuances`	Credential admin, Credentials - Revoke	Contract admin, Credentials - Revoke	-	Show CredentialAdmin `OR` ContractAdmin `OR` credentials.revoke
`Mutation.revokeIdentityIssuances`	Credential admin, Credentials - Revoke	Contract admin, Credentials - Revoke	-	Show CredentialAdmin `OR` ContractAdmin `OR` credentials.revoke
`Mutation.revokeIssuance`	Credential admin, Credentials - Revoke	Contract admin, Credentials - Revoke	-	Show CredentialAdmin `OR` ContractAdmin `OR` credentials.revoke
`Mutation.revokeIssuances`	Credential admin, Credentials - Revoke	Contract admin, Credentials - Revoke	-	Show CredentialAdmin `OR` ContractAdmin `OR` credentials.revoke
`Mutation.revokeUserIssuances`	Credential admin, Credentials - Revoke	Contract admin, Credentials - Revoke	-	Show CredentialAdmin `OR` ContractAdmin `OR` credentials.revoke
`Mutation.revokeWalletIssuances`	Credential admin, Credentials - Revoke	Contract admin, Credentials - Revoke	-	Show CredentialAdmin `OR` ContractAdmin `OR` credentials.revoke
`Mutation.saveConciergeBranding`	Instance admin	-	-	Show InstanceAdmin
`Mutation.saveIdentity`	Issuer, Credential admin	Credential issuance	Issue, Present, ListContracts	Show Issuer `OR` Issue `OR` (LimitedAccess `AND` hasLimitedAccessData-limitedIssuance) `OR` CredentialAdmin `OR` AcquireLimitedAccessToken.Issue `OR` AcquireLimitedAccessToken.Present `OR` AcquireLimitedAccessToken.ListContracts
`Mutation.sendAsyncIssuanceVerification`	*	*	*	Anyone
`Mutation.setApplicationLabelConfigs`	Instance admin	-	-	Show InstanceAdmin
`Mutation.setCorsOriginConfigs`	Instance admin	-	-	Show InstanceAdmin
`Mutation.setEmailSenderConfig`	Instance admin	-	-	Show InstanceAdmin
`Mutation.suspendIdentityStore`	Instance admin	-	-	Show InstanceAdmin
`Mutation.suspendPartner`	Partner admin	-	-	Show PartnerAdmin
`Mutation.testServices`	Instance admin	-	-	Show InstanceAdmin
`Mutation.updateApprovalRequest`	-	Approval request integration	-	Show RequestApproval
`Mutation.updateAsyncIssuanceContact`	Issuer, Support agent	Credential issuance	-	Show (Issuer `OR` Issue) `OR` SupportAgent
`Mutation.updateConciergeClientBranding`	OIDC admin, Instance admin	-	-	Show OidcAdmin `OR` InstanceAdmin
`Mutation.updateContract`	Credential admin	Contract admin	-	Show CredentialAdmin `OR` ContractAdmin
`Mutation.updateIdentityStore`	Instance admin	-	-	Show InstanceAdmin
`Mutation.updateOidcClaimMapping`	OIDC admin	-	-	Show OidcAdmin
`Mutation.updateOidcClient`	OIDC admin	-	-	Show OidcAdmin
`Mutation.updateOidcClientClaimMappings`	OIDC admin	-	-	Show OidcAdmin
`Mutation.updateOidcClientResource`	OIDC admin	-	-	Show OidcAdmin
`Mutation.updateOidcResource`	OIDC admin	-	-	Show OidcAdmin
`Mutation.updatePartner`	Partner admin	-	-	Show PartnerAdmin
`Mutation.updateTemplate`	Credential admin	Contract admin	-	Show CredentialAdmin `OR` ContractAdmin

Subscriptions

Field	UserRoles	AppRoles	Limited Access Token Roles	Rule
`Subscription.*`	Credential admin	-	-	Show CredentialAdmin
`Subscription.backgroundJobEvent`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`Subscription.issuanceEvent`	Issuer, Credential admin	Credential issuance	-	Show Issuer `OR` CredentialAdmin `OR` (isRequestIdFilterDefined `AND` (Issue `OR` (LimitedAccess `AND` hasLimitedAccessData-limitedIssuance) `OR` LimitedAsyncIssuance `OR` Issuee))
`Subscription.photoCaptureEvent`	Issuer	Credential issuance	-	Show (Issuer `OR` Issue `OR` (LimitedAccess `AND` hasLimitedAccessData-limitedIssuance)) `OR` (LimitedAsyncIssuance `AND` asyncIssuanceRequiresPhotoCapture)
`Subscription.presentationEvent`	Credential admin, Reader, Issuer, Partner admin, Approval request admin, OIDC admin, Instance admin	Credential presentation	-	Show CredentialAdmin `OR` (isRequestIdFilterDefined `AND` (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Present `OR` (LimitedAccess `AND` hasLimitedAccessData-limitedPresentation) `OR` (LimitedAccess `AND` hasLimitedAccessData-allowAnonymousPresentation) `OR` LimitedApproval `OR` LimitedOidcAuthn))

Types and fields

Field	UserRoles	AppRoles	Limited Access Token Roles	Rule
`AccessTokenResponse.*`	-	-	Issue, Present, ListContracts, AnonymousPresentations	Show AcquireLimitedAccessToken.Issue `OR` AcquireLimitedAccessToken.Present `OR` AcquireLimitedAccessToken.ListContracts `OR` AcquireLimitedAccessToken.AnonymousPresentations
`ActionedApprovalData.*`	Approval request admin	Approval request integration	-	Show ApprovalRequestAdmin `OR` RequestApproval
`ActionedBy.*`	Approval request admin	Approval request integration	-	Show ApprovalRequestAdmin `OR` RequestApproval
`ApprovalRequest.*`	Approval request admin	-	-	Show LimitedApproval `OR` ApprovalRequestAdmin
`ApprovalRequestResponse.*`	-	Approval request integration	-	Show RequestApproval
`ApprovalTokenResponse.*`	*	*	*	Anyone
`AsyncIssuanceContact.*`	Issuer, Support agent	-	-	Show Issuer `OR` SupportAgent
`AsyncIssuanceErrorResponse.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	-	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent
`AsyncIssuanceRequest.*`	Issuer, Support agent, Reader, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	Credential issuance	-	Show (Issuer `OR` Issue) `OR` (Issuee `AND` asyncIssuanceIsToAuthenticatedUser) `OR` SupportAgent `OR` Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin
`AsyncIssuanceRequestResponse.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`AsyncIssuanceResponse.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`AsyncIssuanceTokenResponse.*`	*	*	*	Anyone
`BackgroundJobActiveEvent.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`BackgroundJobCompletedEvent.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`BackgroundJobErrorEvent.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`BackgroundJobEvent.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`BackgroundJobEventData.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`BackgroundJobProgressEvent.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`Branding.*`	*	*	*	Anyone
`Communication.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`Contact.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`Contract.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`Contract.asyncIssuanceRequests`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` SupportAgent
`Contract.issuances`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` (LimitedAccess `AND` (isRequestIdFilterDefined `OR` isValidLimitedIdentitierFilter)) `OR` (LimitedAsyncIssuance `AND` isRequestIdFilterDefined) `OR` SupportAgent
`Contract.presentations`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential presentation	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Present `OR` (LimitedAccess `AND` (isRequestIdFilterDefined `OR` isValidLimitedIdentitierFilter)) `OR` (LimitedApproval `AND` isRequestIdFilterDefined) `OR` (LimitedOidcAuthn `AND` isRequestIdFilterDefined) `OR` SupportAgent
`ContractCount.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`ContractDisplayClaim.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`ContractDisplayConsent.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`ContractDisplayCredential.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`ContractDisplayCredentialLogo.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`ContractDisplayModel.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`Discovery.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`FaceCheckResult.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`FaceCheckValidation.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`Identity.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation	Issue, Present, ListContracts	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` SupportAgent) `OR` Issue `OR` Present `OR` AcquireLimitedAccessToken.Issue `OR` AcquireLimitedAccessToken.Present `OR` AcquireLimitedAccessToken.ListContracts `OR` LimitedAccess `OR` LimitedOidcAuthn `OR` Issuee
`Identity.asyncIssuanceRequests`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` SupportAgent) `OR` (Issuee `AND` identityIsAuthenticatedUser)
`Identity.issuances`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` (LimitedAccess `AND` (isRequestIdFilterDefined `OR` isValidLimitedIdentitierFilter)) `OR` (LimitedAsyncIssuance `AND` isRequestIdFilterDefined) `OR` SupportAgent) `OR` (Issuee `AND` identityIsAuthenticatedUser)
`Identity.presentations`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential presentation	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Present `OR` (LimitedAccess `AND` (isRequestIdFilterDefined `OR` isValidLimitedIdentitierFilter)) `OR` (LimitedApproval `AND` isRequestIdFilterDefined) `OR` (LimitedOidcAuthn `AND` isRequestIdFilterDefined) `OR` SupportAgent) `OR` (Issuee `AND` identityIsAuthenticatedUser)
`IdentityIssuer.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`Issuance.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent, Credentials - Revoke	Credential issuance, Credential presentation, Contract admin, Credentials - Revoke	-	Show (((Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent) `OR` credentials.revoke) `AND` ((Issuee `AND` issuanceIsToAuthUser) `OR` `NOT` (Issuee))
`ListValidation.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`Me.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`MsGraphFailure.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`NumberValidation.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`OidcClaimMapping.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	Credential issuance, Credential presentation, Contract admin	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee
`OidcClient.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`OidcClientResource.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	Credential issuance, Credential presentation, Contract admin	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee
`OidcResource.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin	Credential issuance, Credential presentation, Contract admin	-	Show Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee
`PhotoCaptureEventData.*`	Issuer	Credential issuance	-	Show (Issuer `OR` Issue `OR` (LimitedAccess `AND` hasLimitedAccessData-limitedIssuance)) `OR` (LimitedAsyncIssuance `AND` asyncIssuanceRequiresPhotoCapture)
`PhotoCaptureTokenResponse.*`	*	*	*	Anyone
`Presentation.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show ((Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent) `AND` ((Issuee `AND` presentationIsByAuthenticatedUser) `OR` `NOT` (Issuee))
`PresentedCredential.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`RegexValidation.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`RequestConfigurationValidation.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`RequestedClaimConstraint.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`RequestedConfiguration.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`RequestedCredential.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`SendAsyncIssuanceVerificationResponse.*`	*	*	*	Anyone
`Template.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`TemplateDisplayClaim.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`TemplateDisplayCredential.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`TemplateDisplayCredentialLogo.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`TemplateDisplayModel.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`TemplateParentData.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`TextValidation.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`User.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`UserCount.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent
`Wallet.*`	Reader, Issuer, Credential admin, Partner admin, Approval request admin, OIDC admin, Instance admin, Support agent	Credential issuance, Credential presentation, Contract admin	-	Show (Reader `OR` Issuer `OR` CredentialAdmin `OR` PartnerAdmin `OR` ApprovalRequestAdmin `OR` OidcAdmin `OR` InstanceAdmin `OR` Issue `OR` Present `OR` ContractAdmin `OR` LimitedAccess `OR` LimitedApproval `OR` LimitedAsyncIssuance `OR` LimitedOidcAuthn `OR` Issuee) `OR` SupportAgent

Queries​

Mutations​

Subscriptions​

Types and fields​

Queries

Mutations

Subscriptions

Types and fields