Skip to content

Permissions and roles

A permission is a resource:action pair. A grant stores one row per permission, so access can be a named role preset or any hand-picked set.

Roles are presets, not stored containers. A permission set that exactly matches a preset displays as that role; anything else displays as custom.

RoleDescriptionPermissions
ViewerRead-only access to the dashboard.6
ManagerFull day-to-day management; cannot manage who has access.28
AdminEverything, including granting and revoking access.31

Discord server administrators and the server owner always have full access regardless of grants, and always display as Admin.

You cannot grant a permission you do not hold yourself, so a Manager cannot create an Admin.

PermissionResourceAllows
subscriptions:readSubscriptionsView subscriptions
subscriptions:createSubscriptionsAdd subscriptions
subscriptions:updateSubscriptionsEdit subscriptions (filters, mute, move)
subscriptions:deleteSubscriptionsRemove subscriptions
players:readPlayersView players
players:updatePlayersRename players
players:deletePlayersDelete players
players:mergePlayersMerge players
players:linkPlayersLink / unlink Discord accounts
accounts:readRiot accountsLook up Riot accounts
accounts:createRiot accountsAdd Riot accounts
accounts:updateRiot accountsEdit Riot accounts
accounts:deleteRiot accountsRemove Riot accounts
accounts:transferRiot accountsTransfer accounts between players
competitions:readCompetitionsView competitions & leaderboards
competitions:createCompetitionsCreate competitions
competitions:updateCompetitionsEdit competitions
competitions:cancelCompetitionsCancel competitions
competitions:inviteCompetitionsManage participants
competitions:scheduleCompetitionsChange update schedule
competitions:refreshCompetitionsForce-refresh leaderboards
reports:readReportsView & preview reports
reports:createReportsCreate reports
reports:updateReportsEdit reports
reports:deleteReportsDelete reports
reports:runReportsRun & post reports
channels:readChannelsList postable channels
audit:readAudit logView the audit log
roles:readRoles & accessView who has access
roles:grantRoles & accessGrant access
roles:revokeRoles & accessRevoke access
RoleIncludes
Viewersubscriptions:read, players:read, accounts:read, competitions:read, reports:read, channels:read
Managersubscriptions:read, subscriptions:create, subscriptions:update, subscriptions:delete, players:read, players:update, players:delete, players:merge, players:link, accounts:read, accounts:create, accounts:update, accounts:delete, accounts:transfer, competitions:read, competitions:create, competitions:update, competitions:cancel, competitions:invite, competitions:schedule, competitions:refresh, reports:read, reports:create, reports:update, reports:delete, reports:run, channels:read, audit:read
Adminsubscriptions:read, subscriptions:create, subscriptions:update, subscriptions:delete, players:read, players:update, players:delete, players:merge, players:link, accounts:read, accounts:create, accounts:update, accounts:delete, accounts:transfer, competitions:read, competitions:create, competitions:update, competitions:cancel, competitions:invite, competitions:schedule, competitions:refresh, reports:read, reports:create, reports:update, reports:delete, reports:run, channels:read, audit:read, roles:read, roles:grant, roles:revoke