Discord Bot Administrator vs Exact Permissions
Whether to give a bot full Administrator rights or only the exact permissions it needs changes what happens if that bot is ever compromised.
Is this your situation?
You are adding a bot and deciding between checking the Administrator box or selecting only the permissions it actually needs. You want to know what each choice changes about what the bot can do in your server.
What it is
Permissions allow users to have specific privileges and functions in their server. Permissions can be assigned per role on both the server level and the channel level. Individual command permissions act as overrides to application-wide permissions. A user can accidentally lock themselves out of a command due to command permission overrides. Server owners and administrators cannot lock themselves out of a command because they can access all commands in the server.
How Discord handles this
- A member can be denied access to a command by turning off the command for @everyone.
- The first step to safely restrict a command is explicitly allowing a specific role to use it.
- The second step is denying @everyone the ability to use the command.
- Following grant-then-deny order prevents a user with the granted role from being locked out.
- Permissions can also be managed on a per-channel basis.
Side by side
| Aspect | Administrator | Exact Permissions |
|---|---|---|
| Command access | Not stated by Discord | Individual command permissions act as overrides to application-wide permissions. |
| Lockout risk | Not stated by Discord | A user can accidentally lock themselves out of a command due to permission overrides. |
| Safe restriction order | Not stated by Discord | Explicitly grant a role access before denying @everyone the command. |
| Assignment level | Server-wide permissions assigned to that role. | Permissions can also be managed on a per-channel basis. |
Common mistakes
- Denying @everyone before granting a role The correct order is to grant a role access first, then deny @everyone.Why it happens: A user can lock themselves out of a command due to permission overrides.Already happened: If access is lost, see how role permission overrides work. Recover a Nuked Discord Server
- Denying @everyone the command entirely A member can be denied a command by turning it off for @everyone.Why it happens: Command permissions override application-wide permissions.
- Assuming the server owner can get locked out Server owners cannot lock themselves out of a command; they can access all commands.Why it happens: Administrators cannot lock themselves out either, since they can access all commands in the server.
If this changes who is in control
You are deciding how much access to give a bot in the server. Review why a bot should not depend on a single owner's account in bot ownership governance.
Quick reference
| Item | Fact |
|---|---|
| Command overrides | Individual command permissions act as overrides to application-wide permissions. |
| Owner access | Server owners cannot be locked out because they access all commands. |
| Admin access | Administrators cannot be locked out because they access all commands. |
| Deny method | Turn off the command for @everyone to deny access. |
| Safe order step 1 | Explicitly allow a specific role to use the command. |
| Safe order step 2 | Deny @everyone the ability to use the command. |
| Outcome of correct order | Prevents a user with the granted role from being locked out. |
| Permission scope | Permissions can be assigned per role on both the server and channel level. |
Frequently asked questions
Can the server owner get locked out of a bot command?
Server owners cannot lock themselves out of a command because they can access all commands in the server.
What order avoids locking out a role?
Grant a specific role access first, then deny @everyone the command.
What causes an accidental lockout?
Command permission overrides can accidentally lock a user out of a command.
Keeping track of who has access
Confusion over which roles and bots hold which permissions builds as a server grows and more people make changes. Delvia keeps a clear record of who and what has access, so decisions like this stay simple to review.
Was this helpful?