Skip to content

Permissions reference

The full table of every permission AO Master uses. Permissions are arranged into groups in the Settings → Roles → Edit Role → Permissions editor — the table below uses the same grouping.

This is the one page in the docs where internal bit names appear next to UI labels — it explicitly serves both audiences (staff designing role permissions + devs / power users debugging "what does this permission gate?"). Every other docs page uses just the UI label.

How permissions combine

A member's effective permissions are the union of all the roles they hold. A member with Admin role + Member role has every permission either of those roles has.

Two special cases:

  • Administrator — a master override. A role with Administrator turned on bypasses every other check. The Owner of the guild is treated as Administrator regardless of which roles they hold.
  • Reserved bits — some bits in the database are reserved for permissions that were removed in earlier refactors. They don't appear in the editor and don't grant anything.

General

LabelInternal bitWhat it gates
AdministratorADMINISTRATORBypass all permission checks. Full access to everything. Dangerous — grant carefully.
Manage GuildMANAGE_GUILDEdit guild name, region, policies, and report visibility. Required for most Settings tabs.
View Audit LogVIEW_AUDIT_LOGSee the guild audit log on Settings → Audit Log. Read-only.

Members

LabelInternal bitWhat it gates
Manage MembersMANAGE_MEMBERSEdit display names and kick members.
Approve Enlist MembersAPPROVE_ENLIST_MEMBERSApprove enlist requests on #Join Requests and manage join codes on Settings → Enlists.

Roles

LabelInternal bitWhat it gates
Manage RolesMANAGE_ROLESCreate, edit, delete, and assign roles below your highest role.

Regear

LabelInternal bitWhat it gates
Approve Regear RequestsAPPROVE_REGEAR_REQUESTApprove or reject death / overcharge regear requests. Also gates Create Cut-off Task + Payout actions.

Cut-off & Lockers

LabelInternal bitWhat it gates
Claim Cut-off TasksCUTOFF_TAKE_TASKSClaim available cut-off tasks (the Take Task button) and mark locker permission changes as applied.
Supervise Cut-off TasksCUTOFF_SUPERVISE_TASKSCreate, edit, undo, and oversee all cut-off tasks regardless of who claimed them.
Manage LockersMANAGE_LOCKERSAssign and unassign lockers to members + edit locker group config.

War Roles

LabelInternal bitWhat it gates
Manage War RolesMANAGE_WAR_ROLESCreate, edit, and assign war role loadouts on Settings → War Roles. Also gates the per-role Silver Cap field.

Announcements

LabelInternal bitWhat it gates
Manage AnnouncementsMANAGE_ANNOUNCEMENTSCreate, edit, and delete guild announcements.

Integrations

LabelInternal bitWhat it gates
Manage IntegrationsMANAGE_INTEGRATIONSFull Discord integration control — pair / unpair the bot, edit role + war-role mappings, configure the Enlist pipeline, browse #Discord Integration. High privilege — grant carefully.

Billing

LabelInternal bitWhat it gates
Manage Guild BillingMANAGE_GUILD_BILLINGRedeem Gold from the guild Treasury to upgrade the guild tier.

Bank (Silver Bank + Siphon Bank + Armory + Item Price)

LabelInternal bitWhat it gates
Manage Banks, Armory & Item PriceMANAGE_GUILD_ECONOMYPaste logs into Silver / Siphon / Armory, add or remove entries, complete withdrawals, manage bank notes, configure low-stock alerts, toggle bank / Item Price systems on or off, manage Item Price focus list + price overrides, reset any of the four.
View Banks, Armory & Item PriceVIEW_GUILD_ECONOMYSee all member balances, full guild transaction history, the Armory inventory + log, and Item Price focus list + market values.

ZvZ Attendance

LabelInternal bitWhat it gates
Manage ZvZ EventsMANAGE_ZVZ_EVENTSSchedule events, edit, close, cancel, archive, reset, and manually adjust attendance. Late-upload override.
Record ZvZ AttendanceRECORD_ZVZ_ATTENDANCEUpload party-roster screenshots during the event window. The Party Leader role.
Shot Call Party BoardSHOT_CALL_PARTY_BOARDCompose parties on an event + force-assign / kick members + manage presets. Narrower than Manage ZvZ Events — can't create / cancel / archive events themselves.

Member Self-Service

These permissions are usually granted to the Default Member Role so every member has them.

LabelInternal bitWhat it gates
Request Death RegearREQUEST_REGEAR_DEATHSubmit death regear requests + see your own deaths on #Request Regear → Deaths. Implies seeing your own My Requests.
Request OverchargeREQUEST_REGEAR_OVERCHARGESubmit overcharge requests + see your own OC requests on My Requests.

Typical role compositions

Role presetPermissions usually granted
Default MemberRequest Death Regear, Request Overcharge. Nothing else by default.
RecruiterApprove Enlist Members.
Packer / Regear StaffClaim Cut-off Tasks. Often paired with View Banks, Armory & Item Price for stock visibility.
Regear ReviewerApprove Regear Requests.
Shot-caller / Party LeaderRecord ZvZ Attendance + Shot Call Party Board.
ManagerAll of the above + Manage Members, Manage Roles, Manage Lockers, View Audit Log.
OwnerTreated as Administrator by default.

Reserved bits

Several bits are reserved in the database from earlier permission refactors and don't appear in the editor. They don't grant anything; the system simply skips them. If you're inspecting an older config blob, you may see references to removed bits like VIEW_GUILD, VIEW_MEMBERS, VIEW_DEATHS, VIEW_TASKS, VIEW_LOCKERS, VIEW_WAR_ROLES, ACK_LOCKERS, VIEW_OWN_DEATHS, VIEW_OWN_REQUESTS, CANCEL_OWN_REQUESTS, VIEW_OWN_ECONOMY. These were consolidated into the broader permissions above; the system silently ignores them when applying an old config.

Last reviewed

Verified against server/utils/permissions.ts on 2026-05-24 against commit ca1b39b2. The grouping + labels here match what staff sees in the Edit Role → Permissions editor.

🚧 Skeleton release — most pages are placeholders. Content fills in section-by-section.