Security

Sensitive permissions

Get warned as soon as a dangerous permission is granted, and undo it in one click.

On this page
Dashboard → Sensitive permissions

In pictures

Sensitive permissions: watched permissions and automatic undo
Sensitive permissions: watched permissions and automatic undoOriginal image

Before you begin

Spider must see the audit log and have Manage Roles, with a role placed above the roles to correct.

Step by step

  1. Open Protection › Sensitive permissions and turn on “Permission alerts”.

  2. Choose the alert channel and, if needed, up to five roles to mention.

  3. Tick the watched permissions: Administrator, Manage Server, Manage Roles, Manage Channels, Manage Webhooks, Ban, Kick, Timeout, Manage Messages, Mention @everyone.

  4. Set automatic undo, added bots, “Ignore owner” and trusted members, then save.

What triggers an alert

  • A role receives a watched permission, or a role is created with one.
  • A member receives a role that grants a watched permission.
  • A bot is added with these permissions (if “Added bots” is on).

Undo or approve

Each alert shows the author and offers a suitable button: “Remove these permissions” for a role, “Remove the role” for a member, “Kick the bot” for a bot, and “This is normal” to approve. With automatic undo (5, 10, 30 or 60 minutes), an alert nobody approved is undone when the delay ends. The page’s “Latest alerts” list keeps the history and state of each alert.

Still stuck?

The team answers on the Spider server. Ask on Discord

All documentation