OptionalexportAllow bim.export.* (data export)
OptionalfilesAllow bim.files.* (uploaded file access)
OptionallensAllow bim.lens.* (lens definitions)
OptionalmodelAllow bim.model.* (model loading/management)
OptionalmutateAllow bim.mutate.* (property editing)
OptionalnetworkAllow bim.network.* (outbound fetch). Off by default — a script gets
this only when the running graph holds at least one network.fetch:*
grant; the per-call host allow-list check still runs against the real
grant list regardless of this flag (see network-request.ts).
OptionalqueryAllow bim.query.* (entity queries)
OptionalstoreAllow bim.store.* (document-level edits — addEntity / removeEntity / positional attrs)
OptionalviewerAllow bim.viewer.* (renderer control, colors, visibility)
Permission configuration — controls which SDK APIs are accessible