Catalogs
What this screen is for
Catalogs in system context is the same reference screen a tenant administrator opens, with two differences: the Algorithms tab shows the whole platform catalogue, unfiltered, instead of one tenant's filtered view; and the second tab is Platform Roles instead of Tenant Roles. Nothing here changes anything. The three algorithm views, the detail sheet and the filters are described on the tenant page and are not repeated here:
The platform catalogue is the source every tenant's catalogue is derived from: a tenant is served the algorithms this list contains, filtered by that tenant's effective algorithm policy. Its labels are shown in English whatever language the console is set to.
What must exist first
The navigation entry appears for anyone holding the permission to list roles.
- The Algorithms tab needs the platform permission to read algorithms; without it the tab reports that the catalogue could not be loaded and offers Retry.
- Effective under deployment policy needs the permission to read the deployment algorithm policy; without it the toggle filters nothing.
- The Platform Roles tab is shown only to a viewer holding at least one
platform.permission, and its list needs the permission to list roles.
Decisions you make here
Reading the catalogue as the platform or as the deployment policy admits it
The header counts N algorithms in platform catalog, and by default All supported is selected: the list is the whole catalogue, so the Dashboard's Full platform catalog card is exactly that here. Effective under deployment policy keeps the same list and applies the console's own copy of the algorithm policy rule to it, using the deployment algorithm policy set on Platform Policies, and names that template in a badge; a policy that denies all algorithms yields an empty list.
That filtered view is what a tenant with no policy of its own is served. A tenant that carries a policy of its own, which on an unlocked installation is every tenant, is filtered by its own template instead, so this view predicts a tenant's catalogue only when the two templates coincide.
Reading the platform role catalogue
Platform Roles lists every row of the installation's role catalogue except the service-to-service rows: the granular permissions of every category, the platform-only ones under Platform Administration and the tenant-plane ones after them, the built-in composite roles, and the custom roles composed by every tenant of the installation. Rows are grouped by category, Platform Administration first, then ADMIN, KEY_MANAGEMENT, SECURE and STREAM and any other category after, with a count of scopes and groups and a search box over the name, display name and description.
The tab's banner describes the list as Deployment-wide scopes assignable to platform administrators; the tenant-plane permissions and the tenant custom roles it also lists are not that. A card shows a role's name, display name and description only; the permissions a composite role holds are not listed, and roles are not assigned here.
How it relates to other screens
The deployment algorithm policy that Effective under deployment policy applies is chosen on Platform Policies, and applying a different template there refreshes this list at once:
A tenant's Catalogs screen shows this catalogue after that tenant's policy filter, with the template name in its banner: