Reference

Session scopes

Scope	Allows
`read`	Read documents, schemas, history, logs and docs.
`edit:scene`	Edit scenes and prefabs through commands.
`edit:assets`	Edit other authored assets (materials, UI, settings).
`edit:code`	Edit game and editor code.
`play`	Start, step and control play worlds.
`run`	Run scripts against the typed SDK (code mode).
`import`	Import source media.
`bake`	Bake derived data (lighting, navigation).
`build`	Build and export the game.
`generate:$`	Run generation jobs that spend money.
`fs:outside-project`	Read or write files outside the project.
`net`	Use the network.

The default policy grants agents every scope except generate:$, fs:outside-project and net.