Manual:$wgAvailableRights

Details
The list of core user rights is defined in User.php, : see Manual:User rights#Adding new rights.

Extensions use this variable instead, like: