Roles and permissions
How roles rank, what permissions exist and the rules that stop escalation.
Permissions come only from roles. Every role has a rank (a position), and higher ranks can manage lower ones. The owner is above everyone.
Default roles
Every experience starts with Administrator, Senior Moderator, Moderator and Support. You can edit them or create your own on the Roles page. Staff can hold several roles; their permissions combine, and the highest role is their rank.
Permission groups
Experience, Moderation, Staff, Tickets, Forms, Player data and stats, Staff management and Integrations. Each permission is a separate switch, such as Ban players, Assign roles, View audit logs or Browse datastores.
Rules that stop escalation
- Nobody can give a role at or above their own.
- Nobody can grant permissions they do not hold, including through custom roles.
- Everything that affects a role's holders (assigning, revoking, resending invitations, Discord and group role mappings) only works on roles below your own.
- Nobody can change their own access.
- The Owner role moves only through ownership transfer.
The same rules apply on the website, in Discord and in /whitelist.
Authorization is never cached
Roles and permissions are read from the database on every request and every Discord command, so removing access takes effect immediately everywhere. Discord roles and Roblox group ranks never grant platform permissions.