Names are <family>_<verb>. Every tool declares one permission, and your key holds the
permissions of the role chosen when it was created, never more than its creator's own. A viewer reads and runs pipelines; an author also creates and
changes drafts, registers lake tables and probes a SELECT. Previewing rows and probing SQL are an
author's rather than a viewer's, because a schema is metadata and a row is your customer's; catalogue
statistics stay a viewer's, because a count the engine already stored is shape, not data.