| Permission | Description |
|------|-----|
|`allow-create-client`|Enables the create_client command without any pre-configured scope.|
|`deny-create-client`|Denies the create_client command without any pre-configured scope.|
|`allow-destroy`|Enables the destroy command without any pre-configured scope.|
|`deny-destroy`|Denies the destroy command without any pre-configured scope.|
|`allow-execute-procedure`|Enables the execute_procedure command without any pre-configured scope.|
|`deny-execute-procedure`|Denies the execute_procedure command without any pre-configured scope.|
|`allow-get-store-record`|Enables the get_store_record command without any pre-configured scope.|
|`deny-get-store-record`|Denies the get_store_record command without any pre-configured scope.|
|`allow-initialize`|Enables the initialize command without any pre-configured scope.|
|`deny-initialize`|Denies the initialize command without any pre-configured scope.|
|`allow-load-client`|Enables the load_client command without any pre-configured scope.|
|`deny-load-client`|Denies the load_client command without any pre-configured scope.|
|`allow-remove-secret`|Enables the remove_secret command without any pre-configured scope.|
|`deny-remove-secret`|Denies the remove_secret command without any pre-configured scope.|
|`allow-remove-store-record`|Enables the remove_store_record command without any pre-configured scope.|
|`deny-remove-store-record`|Denies the remove_store_record command without any pre-configured scope.|
|`allow-save`|Enables the save command without any pre-configured scope.|
|`deny-save`|Denies the save command without any pre-configured scope.|
|`allow-save-secret`|Enables the save_secret command without any pre-configured scope.|
|`deny-save-secret`|Denies the save_secret command without any pre-configured scope.|
|`allow-save-store-record`|Enables the save_store_record command without any pre-configured scope.|
|`deny-save-store-record`|Denies the save_store_record command without any pre-configured scope.|
|`default`|This permission set configures what kind of
operations are available from the stronghold plugin.

#### Granted Permissions

All non-destructive operations are enabled by default.

|