security: update custom roles permissions reference

Add permissions available in custom roles that the reference was missing:

- Licensing: "Manage licenses" (docker/iam-services#1173, BILL-5010)
- DHI: "Manage customizations"
- Cloud Sandboxes: "Use Cloud Sandboxes" (docker/iam-services#1172)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

Author: gmondello

content/manuals/security/roles-and-permissions/custom-roles/permissions-reference.md

@@ -3,12 +3,12 @@ title: Custom role permissions reference
 linkTitle: Permissions reference
 description: >-
   Permissions available for Docker custom roles across organization management,
-  Docker Hub, billing, AI Governance, Docker Hardened Images, and Docker
-  Offload.
+  Docker Hub, billing, licensing, AI Governance, Docker Hardened Images,
+  Docker Offload, and Docker Cloud Sandboxes.
 keywords: >-
   custom roles, custom role permissions, Docker, Docker Hub, organization
-  management, billing, AI Governance, access tokens, SSO, SCIM, OIDC, DHI,
-  Docker Offload, security
+  management, billing, licensing, licenses, AI Governance, access tokens, SSO,
+  SCIM, OIDC, DHI, Docker Offload, Cloud Sandboxes, security
 weight: 20
 aliases:
   - /enterprise/security/roles-and-permissions/custom-roles/permissions-reference/
@@ -17,8 +17,9 @@ aliases:
 {{< summary-bar feature_name="Custom roles" >}}
 
 Custom roles use permissions from organization management, Docker Hub,
-billing, AI Governance, Docker Hardened Images, and Docker Offload. Use
-the following tables to [create or edit a custom role](manage.md).
+billing, licensing, AI Governance, Docker Hardened Images, Docker
+Offload, and Docker Cloud Sandboxes. Use the following tables to [create
+or edit a custom role](manage.md).
 
 ## Organization management
 
@@ -58,6 +59,12 @@ the following tables to [create or edit a custom role](manage.md).
 | View billing   | View organization billing information            |
 | Manage billing | Complete access to managing organization billing |
 
+## Licensing
+
+| Permission      | Description                                                                                                                         |
+| :-------------- | :---------------------------------------------------------------------------------------------------------------------------------- |
+| Manage licenses | Assign and revoke licenses for members and manage auto-assign rules. Does not include purchasing or changing the number of licenses |
+
 ## AI Governance
 
 | Permission            | Description                                          |
@@ -69,16 +76,23 @@ the following tables to [create or edit a custom role](manage.md).
 
 ## DHI (Docker Hardened Images)
 
-| Permission         | Description                                      |
-| :----------------- | :----------------------------------------------- |
-| Create DHI mirrors | Create Docker Hardened Image mirror repositories |
+| Permission            | Description                                                     |
+| :-------------------- | :-------------------------------------------------------------- |
+| Create DHI mirrors    | Create Docker Hardened Image mirror repositories                |
+| Manage customizations | Create, update, and delete Docker Hardened Image customizations |
 
 ## Docker Offload
 
 | Permission        | Description                                    |
 | :---------------- | :--------------------------------------------- |
 | Offload Read-Only | View Offload account status, leases, and zones |
 
+## Cloud Sandboxes
+
+| Permission          | Description                           |
+| :------------------ | :------------------------------------ |
+| Use Cloud Sandboxes | Create and use Docker Cloud Sandboxes |
+
 ## Next steps
 
 - [Manage custom roles](manage.md): Create, assign, and delete custom