Name                       Summary
account-control            allows managing non-system user accounts
alsa                       allows access to raw ALSA devices
autopilot-introspection    allows introspection of application user interface
avahi-observe              allows discovering local domains, hostnames and services
bluetooth-control          allows managing the kernel bluetooth stack
bluez                      allows operating as the bluez service
bool-file                  allows access to specific file with bool semantics
browser-support            allows access to various APIs needed by modern web browsers
camera                     allows access to all cameras
classic-support            special permissions for the classic snap
content                    allows sharing code and data with other snaps
core-support               special permissions for the core snap
cups-control               allows access to the CUPS control socket
dbus                       allows owning a specifc name on DBus
dcdbas-control             allows access to Dell Systems Management Base Driver
docker                     allows access to Docker socket
docker-support             allows operating as the Docker daemon
firewall-control           allows control over network firewall
framebuffer                allows access to universal framebuffer devices
fuse-support               allows access to the FUSE file system
fwupd                      allows operating as the fwupd service
gpio                       allows access to specifc GPIO pin
gsettings                  allows access to any gsettings item of current user
hardware-observe           allows reading information about system hardware
hardware-random-control    allows control over the hardware random number generator
hardware-random-observe    allows reading from hardware random number generator
hidraw                     allows access to specific hidraw device
home                       allows access to non-hidden files in the home directory
i2c                        allows access to specific I2C controller
iio                        allows access to a specific IIO device
io-ports-control           allows access to all I/O ports
joystick                   allows access to joystick devices
kernel-module-control      allows insertion, removal and querying of kernel modules
kubernetes-support         allows operating as the Kubernetes service
libvirt                    allows access to libvirt service
locale-control             allows control over system locale
location-control           allows operating as the location service
location-observe           allows access to the current physical location
log-observe                allows read access to system logs
lxd                        allows access to the LXD socket
lxd-support                allows operating as the LXD service
maliit                     allows operating as the Maliit service
media-hub                  allows operating as the media-hub service
mir                        allows operating as the Mir server
modem-manager              allows operating as the ModemManager service
mount-observe              allows reading mount table and quota information
mpris                      allows operating as an MPRIS player
netlink-audit              allows access to kernel audit system through netlink
netlink-connector          allows communication through the kernel netlink connector
network                    allows access to the network
network-bind               allows operating as a network service
network-control            allows configuring networking and network namespaces
network-manager            allows operating as the NetworkManager service
network-observe            allows querying network status
network-setup-control      allows access to netplan configuration
network-setup-observe      allows read access to netplan configuration
network-status             allows operating as the NetworkingStatus service
ofono                      allows operating as the ofono service
online-accounts-service    allows operating as the Online Accounts service
opengl                     allows access to OpenGL stack
openvswitch                allows access to the openvswitch socket
openvswitch-support        allows access to the openvswitch socket
optical-drive              allows read access to optical drives
physical-memory-control    allows write access to all physical memory
physical-memory-observe    allows read access to all physical memory
ppp                        allows operating as the ppp service
process-control            allows controlling other processes
pulseaudio                 allows operating as the pulseaudio service
raw-usb                    allows raw access to all USB devices
removable-media            allows access to mounted removable storage
screen-inhibit-control     
serial-port                
shutdown                   
snapd-control              
storage-framework-service  
system-observe             
system-trace               
thumbnailer-service        
time-control               
timeserver-control         
timezone-control           
tpm                        
ubuntu-download-manager    
udisks2                    
uhid                       
unity7                     
unity8                     
unity8-calendar            
unity8-contacts            
upower-observe             
x11