Roles hold admin permission nodes. Every user has exactly one role. A fresh install creates four roles: User, Support, Moderator and Administrator. Administrator gets admin.root.
The first account registered on a new panel is put in the Administrator role.
Checks are exact string matches. There are no wildcards: admin.root is the only node that grants everything.
Role permissions are cached (Redis, or files when Redis is down) and the cache is invalidated whenever a role's permissions change.
Admins with admin.root or one of admin.servers.view, admin.servers.edit or admin.servers.delete can open any game server from the client area.
Subuser permissions are separate. They are granted per server (or per WebSpace) by its owner and only apply there.
API keys inherit the permissions of the user who created them. See API authentication.
Source of truth: permission_nodes.fpperm, from which backend/app/Permissions.php and the frontend permission list are generated.
Admin Root
Node
Constant
Grants
admin.root
ADMIN_ROOT
Full access to everything
Admin Dashboard View
Node
Constant
Grants
admin.dashboard.view
ADMIN_DASHBOARD_VIEW
Access to view the admin dashboard
Admin Users
Node
Constant
Grants
admin.users.list
ADMIN_USERS_VIEW
View the users
admin.users.create
ADMIN_USERS_CREATE
Create new users
admin.users.edit
ADMIN_USERS_EDIT
Edit existing users
admin.users.delete
ADMIN_USERS_DELETE
Delete users
admin.users.impersonate
ADMIN_USERS_IMPERSONATE
View the panel as another user (audit logged)
Admin Banned IPs
Node
Constant
Grants
admin.blocked_ips.view
ADMIN_BLOCKED_IPS_VIEW
View banned panel IPs
admin.blocked_ips.create
ADMIN_BLOCKED_IPS_CREATE
Ban IPs from panel registration
admin.blocked_ips.delete
ADMIN_BLOCKED_IPS_DELETE
Remove panel IP bans
Admin Locations
Node
Constant
Grants
admin.locations.view
ADMIN_LOCATIONS_VIEW
View locations
admin.locations.create
ADMIN_LOCATIONS_CREATE
Create new locations
admin.locations.edit
ADMIN_LOCATIONS_EDIT
Edit existing locations
admin.locations.delete
ADMIN_LOCATIONS_DELETE
Delete locations
Admin Realms
Node
Constant
Grants
admin.realms.view
ADMIN_REALMS_VIEW
View realms
admin.realms.create
ADMIN_REALMS_CREATE
Create new realms
admin.realms.edit
ADMIN_REALMS_EDIT
Edit existing realms
admin.realms.delete
ADMIN_REALMS_DELETE
Delete realms
Admin Spells
Node
Constant
Grants
admin.spells.view
ADMIN_SPELLS_VIEW
View spells
admin.spells.create
ADMIN_SPELLS_CREATE
Create new spells
admin.spells.edit
ADMIN_SPELLS_EDIT
Edit existing spells
admin.spells.delete
ADMIN_SPELLS_DELETE
Delete spells
Admin Nodes
Node
Constant
Grants
admin.nodes.view
ADMIN_NODES_VIEW
View nodes
admin.nodes.create
ADMIN_NODES_CREATE
Create new nodes
admin.nodes.edit
ADMIN_NODES_EDIT
Edit existing nodes
admin.nodes.delete
ADMIN_NODES_DELETE
Delete nodes
Admin Roles
Node
Constant
Grants
admin.roles.view
ADMIN_ROLES_VIEW
View roles
admin.roles.create
ADMIN_ROLES_CREATE
Create new roles
admin.roles.edit
ADMIN_ROLES_EDIT
Edit existing roles
admin.roles.delete
ADMIN_ROLES_DELETE
Delete roles
Admin Databases
Node
Constant
Grants
admin.databases.view
ADMIN_DATABASES_VIEW
View databases
admin.databases.create
ADMIN_DATABASES_CREATE
Create new databases
admin.databases.edit
ADMIN_DATABASES_EDIT
Edit existing databases
admin.databases.delete
ADMIN_DATABASES_DELETE
Delete databases
admin.databases.manage
ADMIN_DATABASES_MANAGE
Manage database
Admin Role Permissions
Node
Constant
Grants
admin.roles.permissions.view
ADMIN_ROLES_PERMISSIONS_VIEW
View role permissions
admin.roles.permissions.create
ADMIN_ROLES_PERMISSIONS_CREATE
Create new role permissions
admin.roles.permissions.edit
ADMIN_ROLES_PERMISSIONS_EDIT
Edit existing role permissions
admin.roles.permissions.delete
ADMIN_ROLES_PERMISSIONS_DELETE
Delete role permissions
Admin Settings
Node
Constant
Grants
admin.settings.view
ADMIN_SETTINGS_VIEW
View settings
admin.settings.edit
ADMIN_SETTINGS_EDIT
Edit and manage settings
Admin Storage Sense
Node
Constant
Grants
admin.storage_sense.view
ADMIN_STORAGE_SENSE_VIEW
View Storage Sense insights and cleanup candidates
admin.storage_sense.manage
ADMIN_STORAGE_SENSE_MANAGE
Run Storage Sense cleanup actions
Admin Allocations
Node
Constant
Grants
admin.allocations.view
ADMIN_ALLOCATIONS_VIEW
View allocations
admin.allocations.create
ADMIN_ALLOCATIONS_CREATE
Create new allocations
admin.allocations.edit
ADMIN_ALLOCATIONS_EDIT
Edit existing allocations
admin.allocations.delete
ADMIN_ALLOCATIONS_DELETE
Delete allocations
Admin Servers
Node
Constant
Grants
admin.servers.view
ADMIN_SERVERS_VIEW
View all servers
admin.servers.create
ADMIN_SERVERS_CREATE
Create new servers
admin.servers.edit
ADMIN_SERVERS_EDIT
Edit existing servers
admin.servers.delete
ADMIN_SERVERS_DELETE
Delete servers
admin.servers.install
ADMIN_SERVERS_INSTALL
Install servers
admin.servers.reinstall
ADMIN_SERVERS_REINSTALL
Reinstall servers
admin.servers.suspend
ADMIN_SERVERS_SUSPEND
Suspend servers
admin.servers.unsuspend
ADMIN_SERVERS_UNSUSPEND
Unsuspend servers
Admin Email Templates
Node
Constant
Grants
admin.email.templates.view
ADMIN_TEMPLATE_EMAIL_VIEW
View email templates
admin.email.templates.create
ADMIN_TEMPLATE_EMAIL_CREATE
Create new email templates
admin.email.templates.edit
ADMIN_TEMPLATE_EMAIL_EDIT
Edit existing email templates
admin.email.templates.delete
ADMIN_TEMPLATE_EMAIL_DELETE
Delete email templates
Admin Images
Node
Constant
Grants
admin.images.view
ADMIN_IMAGES_VIEW
View images
admin.images.create
ADMIN_IMAGES_CREATE
Create new images
admin.images.edit
ADMIN_IMAGES_EDIT
Edit existing images
admin.images.delete
ADMIN_IMAGES_DELETE
Delete images
Admin Redirect Links
Node
Constant
Grants
admin.redirect_links.view
ADMIN_REDIRECT_LINKS_VIEW
View redirect links
admin.redirect_links.create
ADMIN_REDIRECT_LINKS_CREATE
Create new redirect links
admin.redirect_links.edit
ADMIN_REDIRECT_LINKS_EDIT
Edit existing redirect links
admin.redirect_links.delete
ADMIN_REDIRECT_LINKS_DELETE
Delete redirect links
Admin Plugins
Node
Constant
Grants
admin.plugins.view
ADMIN_PLUGINS_VIEW
View plugins
admin.plugins.install
ADMIN_PLUGINS_INSTALL
Install plugins
admin.plugins.uninstall
ADMIN_PLUGINS_UNINSTALL
Uninstall plugins
admin.plugins.manage
ADMIN_PLUGINS_MANAGE
Manage plugins
Admin Statistics
Node
Constant
Grants
admin.statistics.view
ADMIN_STATISTICS_VIEW
View statistics
Admin Subdomains
Node
Constant
Grants
admin.subdomains.view
ADMIN_SUBDOMAINS_VIEW
View subdomains
admin.subdomains.create
ADMIN_SUBDOMAINS_CREATE
Create new subdomains
admin.subdomains.edit
ADMIN_SUBDOMAINS_EDIT
Edit subdomains
admin.subdomains.delete
ADMIN_SUBDOMAINS_DELETE
Delete subdomains
Admin FeatherZeroTrust
Node
Constant
Grants
admin.featherzerotrust.view
ADMIN_FEATHERZEROTRUST_VIEW
View FeatherZeroTrust scanner
admin.featherzerotrust.scan
ADMIN_FEATHERZEROTRUST_SCAN
Run scans with FeatherZeroTrust
admin.featherzerotrust.configure
ADMIN_FEATHERZEROTRUST_CONFIGURE
Configure FeatherZeroTrust settings
admin.featherzerotrust.manage
ADMIN_FEATHERZEROTRUST_MANAGE
Manage FeatherZeroTrust
Admin Notifications
Node
Constant
Grants
admin.notifications.view
ADMIN_NOTIFICATIONS_VIEW
View notifications
admin.notifications.create
ADMIN_NOTIFICATIONS_CREATE
Create new notifications
admin.notifications.edit
ADMIN_NOTIFICATIONS_EDIT
Edit existing notifications
admin.notifications.delete
ADMIN_NOTIFICATIONS_DELETE
Delete notifications
Admin Database Snapshots
Node
Constant
Grants
admin.backups.view
ADMIN_BACKUPS_VIEW
View database snapshots
admin.backups.create
ADMIN_BACKUPS_CREATE
Create database snapshots
admin.backups.delete
ADMIN_BACKUPS_DELETE
Delete database snapshots
admin.backups.restore
ADMIN_BACKUPS_RESTORE
Restore database from snapshot
admin.backups.download
ADMIN_BACKUPS_DOWNLOAD
Download database snapshots
Admin Backup Schedules
Node
Constant
Grants
admin.backup_schedules.view
ADMIN_BACKUP_SCHEDULES_VIEW
View server backup schedules
admin.backup_schedules.create
ADMIN_BACKUP_SCHEDULES_CREATE
Create server backup schedules
admin.backup_schedules.edit
ADMIN_BACKUP_SCHEDULES_EDIT
Edit server backup schedules
admin.backup_schedules.delete
ADMIN_BACKUP_SCHEDULES_DELETE
Delete server backup schedules
admin.backup_schedules.run
ADMIN_BACKUP_SCHEDULES_RUN
Manually run server backup schedules
Admin Knowledgebase Categories
Node
Constant
Grants
admin.knowledgebase.categories.view
ADMIN_KNOWLEDGEBASE_CATEGORIES_VIEW
View knowledgebase categories
admin.knowledgebase.categories.create
ADMIN_KNOWLEDGEBASE_CATEGORIES_CREATE
Create new knowledgebase categories
admin.knowledgebase.categories.edit
ADMIN_KNOWLEDGEBASE_CATEGORIES_EDIT
Edit existing knowledgebase categories
admin.knowledgebase.categories.delete
ADMIN_KNOWLEDGEBASE_CATEGORIES_DELETE
Delete knowledgebase categories
Admin Knowledgebase Articles
Node
Constant
Grants
admin.knowledgebase.articles.view
ADMIN_KNOWLEDGEBASE_ARTICLES_VIEW
View knowledgebase articles
admin.knowledgebase.articles.create
ADMIN_KNOWLEDGEBASE_ARTICLES_CREATE
Create new knowledgebase articles
admin.knowledgebase.articles.edit
ADMIN_KNOWLEDGEBASE_ARTICLES_EDIT
Edit existing knowledgebase articles
admin.knowledgebase.articles.delete
ADMIN_KNOWLEDGEBASE_ARTICLES_DELETE
Delete knowledgebase articles
Admin API
Node
Constant
Grants
admin.api.bypass_restrictions
ADMIN_API_BYPASS_RESTRICTIONS
Bypass API rate limits and restrictions
User API
Node
Constant
Grants
user.api_keys.create
USER_API_KEYS_CREATE
Create personal API keys even when user API key creation is disabled panel-wide
User Servers
Node
Constant
Grants
user.servers.bypass_subdomain_requirement
USER_SERVERS_BYPASS_SUBDOMAIN_REQUIREMENT
Use servers without a panel subdomain when subdomain is required panel-wide
Admin Tickets
Node
Constant
Grants
admin.tickets.view
ADMIN_TICKETS_VIEW
View support tickets
admin.tickets.create
ADMIN_TICKETS_CREATE
Create support tickets
admin.tickets.edit
ADMIN_TICKETS_EDIT
Edit support tickets
admin.tickets.delete
ADMIN_TICKETS_DELETE
Delete support tickets
admin.tickets.manage
ADMIN_TICKETS_MANAGE
Manage all aspects of support tickets
Admin Ticket Categories
Node
Constant
Grants
admin.ticket_categories.view
ADMIN_TICKET_CATEGORIES_VIEW
View ticket categories
admin.ticket_categories.create
ADMIN_TICKET_CATEGORIES_CREATE
Create ticket categories
admin.ticket_categories.edit
ADMIN_TICKET_CATEGORIES_EDIT
Edit ticket categories
admin.ticket_categories.delete
ADMIN_TICKET_CATEGORIES_DELETE
Delete ticket categories
Admin Ticket Priorities
Node
Constant
Grants
admin.ticket_priorities.view
ADMIN_TICKET_PRIORITIES_VIEW
View ticket priorities
admin.ticket_priorities.create
ADMIN_TICKET_PRIORITIES_CREATE
Create ticket priorities
admin.ticket_priorities.edit
ADMIN_TICKET_PRIORITIES_EDIT
Edit ticket priorities
admin.ticket_priorities.delete
ADMIN_TICKET_PRIORITIES_DELETE
Delete ticket priorities
Admin Ticket Statuses
Node
Constant
Grants
admin.ticket_statuses.view
ADMIN_TICKET_STATUSES_VIEW
View ticket statuses
admin.ticket_statuses.create
ADMIN_TICKET_STATUSES_CREATE
Create ticket statuses
admin.ticket_statuses.edit
ADMIN_TICKET_STATUSES_EDIT
Edit ticket statuses
admin.ticket_statuses.delete
ADMIN_TICKET_STATUSES_DELETE
Delete ticket statuses
Admin Ticket Attachments
Node
Constant
Grants
admin.ticket_attachments.view
ADMIN_TICKET_ATTACHMENTS_VIEW
View ticket attachments
admin.ticket_attachments.manage
ADMIN_TICKET_ATTACHMENTS_MANAGE
Manage ticket attachments
Admin Ticket Messages
Node
Constant
Grants
admin.ticket_messages.view
ADMIN_TICKET_MESSAGES_VIEW
View ticket messages
admin.ticket_messages.manage
ADMIN_TICKET_MESSAGES_MANAGE
Manage ticket messages
Admin VM Instances
Node
Constant
Grants
admin.vm_instances.view
ADMIN_VM_INSTANCES_VIEW
View VM instances
admin.vm_instances.edit
ADMIN_VM_INSTANCES_EDIT
Edit existing VM instances
admin.vm_instances.delete
ADMIN_VM_INSTANCES_DELETE
Delete VM instances
Admin WebPlates
Node
Constant
Grants
admin.webplates.view
ADMIN_WEBPLATES_VIEW
View webplates
admin.webplates.create
ADMIN_WEBPLATES_CREATE
Create new webplates
admin.webplates.edit
ADMIN_WEBPLATES_EDIT
Edit existing webplates
admin.webplates.delete
ADMIN_WEBPLATES_DELETE
Delete webplates
Admin WebSpaces
Node
Constant
Grants
admin.webspaces.view
ADMIN_WEBSPACES_VIEW
View webspaces
admin.webspaces.create
ADMIN_WEBSPACES_CREATE
Create new webspaces
admin.webspaces.edit
ADMIN_WEBSPACES_EDIT
Edit existing webspaces
admin.webspaces.delete
ADMIN_WEBSPACES_DELETE
Delete webspaces
Admin Wings Backups
Node
Constant
Grants
admin.wings_backups.view
ADMIN_WINGS_BACKUPS_VIEW
View Wings backups
admin.wings_backups.manage
ADMIN_WINGS_BACKUPS_MANAGE
Manage Wings backup settings
admin.wings_backups.run
ADMIN_WINGS_BACKUPS_RUN
Run or trigger Wings backups
Game server subuser permissions
Shown on the server's Subusers page. The server owner always has all of them.
WebSocket
Node
Name
Allows
websocket.connect
Connect
Allows a user to connect to the server console via WebSocket.
Control
Node
Name
Allows
control.console
Console
Allows a user to send commands to the server instance via the console.
control.start
Start
Allows a user to start the server if it is stopped.
control.stop
Stop
Allows a user to stop a server if it is running.
control.restart
Restart
Allows a user to perform a server restart. This allows them to start the server if it is offline, but not put the server in a completely stopped state.
User
Node
Name
Allows
user.create
Create
Allows a user to create new subusers for the server.
user.read
Read
Allows the user to view subusers and their permissions for the server.
user.update
Update
Allows a user to modify other subusers.
user.delete
Delete
Allows a user to delete a subuser from the server.
File
Node
Name
Allows
file.create
Create
Allows a user to create additional files and folders via the Panel or direct upload.
file.read
Read
Allows a user to view the contents of a directory, but not view the contents of or download files.
file.read-content
Read Content
Allows a user to view the contents of a given file. This will also allow the user to download files.
file.update
Update
Allows a user to update the contents of an existing file or directory.
file.delete
Delete
Allows a user to delete files or directories.
file.archive
Archive
Allows a user to archive the contents of a directory as well as decompress existing archives on the system.
file.sftp
SFTP
Allows a user to connect to SFTP and manage server files using the other assigned file permissions.
Backup
Node
Name
Allows
backup.create
Create
Allows a user to create new backups for this server.
backup.read
Read
Allows a user to view all backups that exist for this server.
backup.delete
Delete
Allows a user to remove backups from the system.
backup.download
Download
Allows a user to download a backup for the server. Danger: this allows a user to access all files for the server in the backup.
backup.restore
Restore
Allows a user to restore a backup for the server. Danger: this allows the user to delete all of the server files in the process.
Allocation
Node
Name
Allows
allocation.read
Read
Allows a user to view all allocations currently assigned to this server. Users with any level of access to this server can always view the primary allocation.
allocation.create
Create
Allows a user to assign additional allocations to the server.
allocation.update
Update
Allows a user to change the primary server allocation and attach notes to each allocation.
allocation.delete
Delete
Allows a user to delete an allocation from the server.
Startup
Node
Name
Allows
startup.read
Read
Allows a user to view the startup parameters for a server.
startup.update
Update
Allows a user to modify startup parameters for a server.
startup.docker-image
Update Docker Image
Allows a user to modify the Docker image used for a server.
Templates
Node
Name
Allows
templates.read
Read
Allows a user to view available server templates.
templates.install
Install
Allows a user to install templates on the server.
Database
Node
Name
Allows
database.create
Create
Allows a user to create new databases for this server.
database.read
Read
Allows a user to view all databases that exist for this server.
database.update
Update
Allows a user to view passwords for databases.
database.delete
Delete
Allows a user to remove databases from the system.
database.view_password
view_password
Schedule
Node
Name
Allows
schedule.create
Create
Allows a user to create new schedules for this server.
schedule.read
Read
Allows a user to view all schedules that exist for this server.
schedule.update
Update
Allows a user to modify schedules for a server.
schedule.delete
Delete
Allows a user to remove schedules from the system.
Settings
Node
Name
Allows
settings.rename
Rename
Allows a user to rename a server.
settings.change-egg
change-egg
settings.reinstall
Reinstall
Allows a user to trigger a server reinstallation.
Activity
Node
Name
Allows
activity.read
Read
Allows a user to view server activity.
Subdomain
Node
Name
Allows
subdomain.manage
Manage
Allows a user to create, update, delete, and sync subdomains for this server.
Firewall
Node
Name
Allows
firewall.read
Read
Allows a user to view the firewall rules for this server.
firewall.manage
Manage
Allows a user to create, update, and delete firewall rules for this server.
Proxy
Node
Name
Allows
proxy.read
Read
Allows a user to view the proxy rules for this server.
proxy.manage
Manage
Allows a user to create, update, and delete proxy rules for this server.
Import
Node
Name
Allows
import.read
Read
Allows a user to view server imports.
import.manage
Manage
Allows a user to create and manage server imports.
WebSpace subuser permissions
WebSpaces (web hosting) have their own set, defined in WebSpaceSubuserPermissions.php.
