export declare const globalCapabilities: readonly ["global.oidc-client.read", "global.oidc-client.manage", "global.organization.read", "global.organization.manage", "global.alert.read", "global.alert.manage", "global.user.read", "global.user.manage", "global.user.delete", "global.admin.manage", "global.signing-key.rotate", "global.break-glass.request", "global.break-glass.approve"];
export type TGlobalCapability = (typeof globalCapabilities)[number];
export declare const delegableGlobalCapabilities: readonly ["global.oidc-client.read", "global.oidc-client.manage", "global.organization.read", "global.organization.manage", "global.alert.read", "global.alert.manage", "global.user.read", "global.user.manage", "global.break-glass.request"];
export type TDelegableGlobalCapability = (typeof delegableGlobalCapabilities)[number];
/**
 * Capabilities that may be activated temporarily through the two-person
 * break-glass protocol. Authority to delete accounts, manage administrators,
 * rotate signing keys, or approve break-glass access is never eligible.
 */
export declare const breakGlassEligibleGlobalCapabilities: readonly ["global.oidc-client.manage", "global.organization.manage", "global.alert.manage", "global.user.manage"];
export type TBreakGlassEligibleGlobalCapability = (typeof breakGlassEligibleGlobalCapabilities)[number];
export declare const tenantCapabilities: readonly ["tenant.organization.read", "tenant.organization.manage", "tenant.organization.delete", "tenant.organization.export", "tenant.role.read", "tenant.role.manage", "tenant.membership.read", "tenant.membership.manage", "tenant.ownership.transfer", "tenant.app-connection.read", "tenant.app-connection.manage", "tenant.sso.read", "tenant.sso.manage", "tenant.scim-token.read", "tenant.scim-token.manage", "tenant.billing.read", "tenant.billing.manage", "tenant.alert.read", "tenant.alert.manage"];
export type TTenantCapability = (typeof tenantCapabilities)[number];
export declare const delegableTenantCapabilities: readonly ["tenant.organization.read", "tenant.organization.manage", "tenant.organization.export", "tenant.role.read", "tenant.role.manage", "tenant.membership.read", "tenant.membership.manage", "tenant.app-connection.read", "tenant.app-connection.manage", "tenant.sso.read", "tenant.sso.manage", "tenant.scim-token.read", "tenant.scim-token.manage", "tenant.billing.read", "tenant.billing.manage", "tenant.alert.read", "tenant.alert.manage"];
export type TDelegableTenantCapability = (typeof delegableTenantCapabilities)[number];