Can manage buckets - Allow a user to manage all buckets in the registry, as well as provide the user access to all buckets from a connected system (e.g., NiFi).

Can manage users - Allow a user to manage all registry users and groups.

Can manage policies - Allow a user to grant all registry users read, write, and delete permission to a bucket.

Can proxy user requests - Allow a connected system (e.g., NiFi) to process requests of authorized users of that system.