Reviewer access
The Recipe creates the AI Code Review User role if it does not already exist and grants these permissions:
- Add AI Code Review UI review.
- View AI Code Review UI review.
- List AI Code Review UI review.
View permission allows access to reviews across the UI Drupal site, not only reviews submitted by the account. Assign the role only to people who may see those review contents. The Recipe preserves existing role properties and unrelated permissions when the role already exists.
The Recipe does not modify the anonymous or authenticated roles or grant administration, deletion, or AI-tool permissions. An administrator must assign the reviewer role to individual accounts.
Cancellation of a queued or running review additionally requires Edit AI Code Review UI review. This permission is excluded from the default role because it has broader entity-access meaning. An administrator can grant it after reviewing that scope. See the UI cancellation guidance.