Roles & Permissions
Arkanis uses a capability-based permission system with fine-grained capabilities organised into groups. Assign role presets, customise per-role overrides, and control exactly who can do what.
What is this?
Capability-based permissions: every Arkanis action belongs to a capability (issue a strike, edit a role, run an RCON kick), and you decide which Discord roles hold which capabilities. Eight role presets (Owner, Senior Admin, Head Mod, Moderator, Game Admin, Support, Staff, Custom) cover most teams; per-command overrides handle the edge cases.
Why you might want it
One Discord "Admin" role giving everyone everything is how communities end up with mass-ban incidents. Capability presets let you say "mods can warn and strike but not ban", "game admins can run RCON but not edit settings", and have it enforced everywhere Arkanis runs. The Check User Permissions tool tells you exactly what someone can do before you trust them.
The Capability System
Instead of simple "admin" or "moderator" levels, Arkanis uses a fine-grained capability system. Each capability controls access to a specific action or feature. Capabilities are organised into the groups shown below.
Access to each Discord panel: player, enforcement, cases, moderation, settings, help, RCON, and Pterodactyl.
View player profiles, link IDs, and unlink IDs.
Issue strikes, bans, warnings, mutes; clear strikes; view the enforcement board; manage enforcement rules; wipe history.
Manage cases and handle ban appeals.
Send announcements, manage role panels, configure AutoMod rules, manage embeds.
Toggle features, configure channels, manage role permissions, reset config, run setup wizard, inspect user perms, view Pro status.
View server status, control power, and manage server files.
Player management, server control, game config, and verification commands.
View servers, control power, manage files, and send console commands.
Configure log monitoring, control start/stop, and access server files via SFTP.
Role Presets
Instead of configuring every capability individually, Arkanis provides role presets: pre-built bundles of capabilities designed for common staff positions. You link a Discord role to an Arkanis preset, and everyone with that Discord role inherits the corresponding capabilities.
Full access to every capability. Automatically assigned to the guild owner; cannot be removed.
All capabilities except settings reset and some dangerous server operations. For trusted admins who manage day-to-day operations.
Full enforcement, cases, moderation, and player management. No settings or server infrastructure access.
Issue strikes and warnings, manage cases, view players. No ban capability or panel access.
RCON, Pterodactyl, and SFTP access. Designed for technical staff who manage the game server but don't handle community moderation.
Case management and player lookup only. Ideal for community helpers who handle support requests.
Read-only access to panels and player profiles. A baseline role for staff who need visibility without action permissions.
Start from scratch and assign exactly the capabilities you need. Use this when none of the presets fit your team structure.
Setting Up Admin Roles
Link a Discord Role
In the Settings Panel or dashboard, go to the roles section. Select a Discord role from the dropdown and assign it an Arkanis role preset. Anyone in your server with that Discord role inherits the preset's capabilities.
Add Per-Role Command Overrides (Optional)
After assigning a preset, you can add command-level overrides. For example, you might assign the "Moderator" preset but explicitly grant the ban capability, or assign "Senior Admin" but deny access to a specific RCON command. Overrides are additive for grants and absolute for denies.
Verify with Check User Permissions
Open the settings panel with /settings panel and select Check User Permissions from the dropdown. Pick the staff member to see their effective capabilities, command access, and role-by-role breakdown. This is the fastest way to debug "why can't I run this command?" reports.
Dangerous Commands
Some commands can cause data loss, disrupt service, or affect many users at once. Arkanis tags these as dangerous and disables them by default in every preset, including Owner. They must be explicitly granted through capability overrides.
wipehistorybanclearstrikes
unlinkid
rolepermissionsfeature- Several
inpanel_settings_*actions
rcon_ban,rcon_removeserverrcon_wipecorpses,rcon_allowdinosrcon_whitelist*,rcon_globalchatrcon_togglehumans,rcon_toggleaircon_disableai,rcon_aidensity
server_stop,server_killserver_editfileserver_console
inpanel_enforcement_baninpanel_enforcement_clearinpanel_enforcement_wipeinpanel_player_unlink
Checking Effective Permissions
Open the Settings Panel
Run /settings panel in Discord.
Select Check User Permissions
From the Account & Admin category, choose Check User Permissions.
Pick a User
Use the member selector to pick the user whose permissions you want to inspect.
Review the Breakdown
Arkanis returns the user's full capability matrix, the commands they can currently invoke, and a role-by-role breakdown showing which role granted each capability. Any denies from overrides are highlighted.