RAML : /mod-permissions/permissions.html
when you create a user, api4thewin for example, you must grant it permissions or it will not be able to do anything except login to the UI where, if it doesn't have any permissions, it won't be able to see or do anything.
...
for a complete list of permissions, including those that you won't find in the UI, GET /perms/permissions
see also permspermissions