Manual:$wgAvailableRights

Details
The list of core user rights is defined in User.php, : see Manual:User rights.

Extensions use this variable instead, like: