The role catalogue

Eighteen roles exist in the live realm, drawing on a catalogue of 107 permissions. Fifteen are built-in (System); three are custom.

Role	Identifier	Permissions	Built in
Notification publisher	notification-publisher	0	System
Reporting publisher	reporting-publisher	0	System
System admin	system-admin	43	System
Tpa admin	tpa-admin	102	System
Tpa bi te	tpa-bi-te	0	System
Tpa bi uwa	tpa-bi-uwa	0	System
Tpa contractor	tpa-contractor	13	System
Tpa gatekeeper	tpa-gatekeeper	12	System
Tpa installer	tpa-installer	4	System
Tpa line controller	tpa-line-controller	3	System
Tpa management	tpa-management	21	System
Tpa reconciler	tpa-reconciler	22	System
Tpa uwa	tpa-uwa	9	System
Tpa viewer	tpa-viewer	17	System
Tpas notification publisher	tpas-notification-publisher	0	System
Contractor	contractor	18	Custom
Organisation Contractor	organisation-contractor	12	Custom
Park Auditor	park-auditor	13	Custom

Five roles carry 0 permissions — the two notification publishers, the reporting publisher and the two BI feeds. They are machine roles for services that talk to TPAS, not roles for people. A person holding only one of them can sign in and reach nothing.

note

These are live counts, read from the roles page. They move whenever a role is edited. The permission map in What each permission unlocks is the reference; the counts are a snapshot.