Permissions
Every staff permission of the role system, grouped as in the role editor.
These are the permissions you tick in a role. Sensitive ones are marked with ⚠: they reach secrets or can harm the whole panel, so give them only to people you trust.
The panel's own areas (users, servers, nodes, eggs …) are in the role system too, so staff with a role cannot reach the core admin pages they have no permission for.
Panel
| Permission | Allows |
|---|---|
overview.view | Overview page |
activity.view | Panel activity log |
settings.view | View panel settings |
settings.manage ⚠ | Change panel settings — Mail, security, general settings. |
extensions.view | View extensions |
extensions.settings | Configure extensions |
extensions.toggle ⚠ | Enable and disable extensions |
extensions.manage ⚠ | Install and remove extensions — Installs code on the panel. |
themes.view | View themes |
themes.manage | Activate and configure themes |
api-keys.view | View application API keys |
api-keys.manage ⚠ | Create and use application API keys — API keys can do everything the role can, and more. |
Users
| Permission | Allows |
|---|---|
users.view | View users |
users.history | User history — Logins, IPs and past changes. |
users.create | Create users |
users.update | Edit users — Name, email, language. Never other staff. |
users.password ⚠ | Change passwords of users |
users.2fa | Turn off two-factor authentication |
users.avatar | Change or remove avatars |
users.delete ⚠ | Delete users |
Servers
| Permission | Allows |
|---|---|
servers.view | View servers |
servers.create | Create servers |
servers.details | Edit details — Name, owner, description, external ID. |
servers.build | Edit resources — Memory, CPU, disk, allocations, limits. |
servers.startup | Edit startup — Egg, image, startup command, variables. |
servers.databases | Manage server databases |
servers.backups | Lock and unlock backups |
servers.mounts | Manage server mounts |
servers.suspend | Suspend and unsuspend |
servers.reinstall | Reinstall and rebuild |
servers.transfer | Transfer to another node |
servers.delete ⚠ | Delete servers |
servers.force-delete ⚠ | Force delete servers — Skips the node; files may stay behind. |
Server access
| Permission | Allows |
|---|---|
access.request | Request access to servers — Ask owners for access to work on their server. |
access.bypass ⚠ | Work on any server without asking — Skips staff access requests. |
Infrastructure
| Permission | Allows |
|---|---|
nodes.view | View nodes — Includes live usage. |
nodes.manage ⚠ | Create, edit and delete nodes |
nodes.allocations | Manage allocations |
nodes.configuration ⚠ | Node configuration and deploy tokens — Contains the node secret. |
locations.view | View locations |
locations.manage | Manage locations |
database-hosts.view | View database hosts |
database-hosts.manage ⚠ | Manage database hosts — Contains database passwords. |
mounts.view | View mounts |
mounts.manage | Manage mounts |
Server templates
| Permission | Allows |
|---|---|
eggs.view | View eggs |
eggs.manage | Create, edit and delete eggs |
eggs.scripts ⚠ | Edit install scripts and variables — Scripts run as root on nodes. |
eggs.import | Import eggs and use the egg catalog |
tags.view | View tags |
tags.manage | Manage tags |
Look & settings
| Permission | Allows |
|---|---|
stratum.settings | Branding, theme and fonts |
stratum.account | Account page settings |
stratum.registration | Registration settings |
stratum.features | Server features — Database manager, schedule helper, subuser presets, importer, trash. |
stratum.announcements.view | View announcements |
stratum.announcements.manage | Manage announcements |
stratum.banners.view | View server banners |
stratum.banners.manage | Manage server banners |
stratum.seo.view | View SEO |
stratum.seo.manage | Manage SEO |
stratum.server-sidebar | Server sidebar |
stratum.ai.view | View AI usage — Log analyses, providers used and token use. |
stratum.ai.manage ⚠ | AI settings — AI providers and their API keys, limits; trying the analysis. |
stratum.referrals.view | View referrals — Referrals, rewards, payouts and top referrers. |
stratum.referrals.manage ⚠ | Manage referrals — Settings and rewards, approve or reject referrals, mark payouts as paid. |
stratum.upgrades.view | View upgrades — Upgrade orders and their revenue. |
stratum.upgrades.manage ⚠ | Manage upgrades — Upgrade products and prices, apply or remove upgrades by hand. |
stratum.playerstats.view | View player statistics — Players online on all servers. |
stratum.playerstats.manage | Player statistics settings — Interval, retention, protocols per egg, what users see. |
stratum.crashes.view | View crashes — Crashes on all servers with cause and console output. |
stratum.crashes.manage | Crash detection settings — Auto-restart rules, crash loops, freeze detection. |
stratum.mail.view | View email log — Sent emails and emails to users with their progress. |
stratum.mail.send | Send emails to users — Write and send emails to all users or a group. |
stratum.mail.manage ⚠ | Email settings — Delivery provider and its keys, email design and the texts of panel emails. |
stratum.languages.view | View languages — See languages and download their JSON files. |
stratum.languages.translate | Translate — Edit strings, upload JSON files, collect strings while browsing. |
stratum.languages.manage | Language settings — Turn translations on, add and delete languages, set the default. |
Support
| Permission | Allows |
|---|---|
stratum.tickets.view | View tickets |
stratum.tickets.reply | Reply to tickets |
stratum.tickets.manage | Close, assign and delete tickets |
stratum.tickets.settings | Ticket settings |
stratum.feedback.view | View feedback |
stratum.feedback.reply | Reply to feedback |
stratum.feedback.manage | Feedback blacklist, settings and deleting |
stratum.notes.view | View staff notes |
stratum.notes.write | Write and edit staff notes |
stratum.notes.delete | Delete staff notes |
Moderation
| Permission | Allows |
|---|---|
stratum.bans.view | View bans |
stratum.bans.create | Ban users and IPs — Also edit existing bans. |
stratum.bans.lift | Lift bans |
stratum.bans.delete | Delete bans |
stratum.dupedb.view | View the DupeDB dupe check |
stratum.dupedb.manage | Manage the DupeDB dupe check |
stratum.security.view | View security settings |
stratum.security.manage ⚠ | Change security settings — Captcha, IP blocks. |
stratum.activity.view | Stratum activity log |
stratum.activity.export | Export the activity log |
stratum.activity.settings | Activity log settings |
Server features
| Permission | Allows |
|---|---|
stratum.presets.view | View schedule, subuser and server presets |
stratum.presets.manage | Manage schedule, subuser and server presets |
stratum.packages | Assign packages and splits to servers |
stratum.templates.view | View server templates |
stratum.templates.manage | Manage server templates |
stratum.expiry.view | View server expiry |
stratum.expiry.manage | Manage server expiry |
stratum.cloudflare.view | View the domain manager |
stratum.cloudflare.manage | Manage the domain manager |
stratum.offline-motd.view | View offline MOTD |
stratum.offline-motd.manage | Manage offline MOTD |
stratum.boost.view | View auto boost |
stratum.boost.manage ⚠ | Configure auto boost — Which servers get extra CPU and memory during spikes, and how much. |
stratum.requests.view | View staff access requests |
stratum.requests.manage | Staff access rules and history |
Operations
| Permission | Allows |
|---|---|
stratum.maintenance.view | View maintenance |
stratum.maintenance.manage ⚠ | Start, plan and end maintenance — Can stop every server. |
stratum.maintenance.design | Design the maintenance page |
stratum.discord.view | View the Discord integration |
stratum.discord.tickets | Discord tickets |
stratum.discord.manage ⚠ | Configure the Discord bot — Bot token, modules, panels. |
stratum.billing.view | View billing — Revenue, open invoices and customer details from WHMCS / Paymenter. |
stratum.billing.invoices | Create invoices |
stratum.billing.credit | Give credit |
stratum.billing.manage ⚠ | Billing settings and linking — API keys, sync, which user and server belong to which customer and service. |
stratum.system.view | System status — Health, errors and timings of the panel and its services. |
stratum.system.manage | Retry failed jobs and reset timings |
stratum.roles ⚠ | Roles and permissions — Only roles below their own, and only permissions they have. |
Subuser permissions
The permissions owners give subusers on a server are on Subusers.