Generic
Broad PDS account permissions, equivalent to the previous "App Password" authorization level:
Write (create/update/delete) any repository record type
Upload blobs (media files)
Read and write any personal preferences
API endpoints and service proxying for most Lexicon endpoints, to any service provider (identified by DID)
Ability to generate service auth tokens for the specific API endpoints the client has access to