Admins can manage built-in and custom actions with placeholders, ENV vars, and actions.create/update/delete permissions.