# Permissions ## allow-cli-matches Enables the cli_matches command without any pre-configured scope. ## deny-cli-matches Denies the cli_matches command without any pre-configured scope. ## default Allows reading the CLI matches