Members and permissions

Tenant roles

On the tenant’s Members page, owners and admins add people by email. Someone without an account gets an invitation link (valid 7 days).

Role	May
Owner, Admin	everything in the tenant: servers, members, Steam accounts, tokens, webhooks
Member	only the servers they are granted

Server permissions

On a server’s Access tab (owners and admins), a member of the tenant gets a set of permissions on that server. Presets fill in common sets:

Preset	Permissions
View only	server.view, console.read, monitor.view
Operator	server.view, monitor.view, console.*, power.*
Files only	server.view, files.*
Everything	*

Groups (Console, Power, Files…) can also be ticked as a whole.

The panel’s buttons and tabs follow the permissions: what someone may not do isn’t shown.

The full list: Permissions.

Path-limited file access

File permissions can be limited to paths, with wildcards:

Pattern	Matches
whitelist.txt	that file
config/*	files directly in config/
config/**	everything below config/
config/*.yml	YAML files directly in config/

Upper and lower case count, as on the node. An empty list allows all paths.

A member limited this way sees only the folders leading to their files, and SFTP and zip downloads follow the same limits.

Moving a file needs files.write on both the old and the new path.