See these documents:

• Okapi Security Model and the Okapi Guide and Reference
• Permissions in Stripes and FOLIO
• Adding new permissions to FOLIO UI modules
• FOLIO permission model
• Naming conventions