diff --git a/src/components/RolePermissionsPanel.tsx b/src/components/RolePermissionsPanel.tsx
index 63eff8c..6955c5c 100644
--- a/src/components/RolePermissionsPanel.tsx
+++ b/src/components/RolePermissionsPanel.tsx
@@ -143,7 +143,11 @@ export function RolePermissionsPanel() {
   const allEditableIds = useMemo(() => catalog.filter(item => !item.protected).map(item => item.actionId), [catalog])
   const dirty = !!draft && visiblePatch(draft, allEditableIds).length > 0
   const filtered = roles ?? []
-  const capabilityGroups = useMemo(() => buildCapabilityGroups(catalog.filter(item => !item.protected)), [catalog])
+  // 角色只承载项目范围动作：受保护的系统授权由服务端整批拒绝，
+  // 在角色编辑面展示只会误导（账号级显式授权仍在用户面板单独配置）。
+  const capabilityGroups = useMemo(
+    () => buildCapabilityGroups(catalog.filter(item => !item.protected && item.actionId.indexOf('system.') !== 0)),
+    [catalog])
   const labels = useMemo(() => Object.fromEntries(catalog.map(item => [item.actionId, item.label])), [catalog])
   const changes = draft ? capabilityGroupChanges(draft, capabilityGroups) : []
   const breaks = draft ? linkedChainBreaks(draft.values) : []