...
All permission checks that occur within the Enterprise Store happens happen against a key, which is dynamically evaluated given the context of the permission check.
For example, the diagram above defines an ASSET_CREATE permission key, which is mapped as follows:
...