Roles & Permission Levels Reference

# Role Hierarchy

RAC categorizes administrative authority into 5 ascending privilege levels:

Level	Role Name	Primary Responsibility
1	Viewer	Read-only inspection of telemetry, detection feeds, and live metrics. Cannot issue punishments.
2	Moderator	Active player moderation: Issuing warnings, player freezing, and spectating.
3	Admin	Disciplinary enforcement: Kicking players, issuing temporary bans (up to 7 days).
4	SuperAdmin	Permanent account bans, incident evidence purging, and live detector parameter tuning.
5	Owner	Unrestricted authority: RBAC role assignment, ban revocations, and master key modifications.

---

# Permission Capabilities Matrix

Capability / Action	Viewer	Moderator	Admin	SuperAdmin	Owner
View Dashboard & Telemetry	✅	✅	✅	✅	✅
Spectate Players In-Game	✅	✅	✅	✅	✅
Issue Player Warning	❌	✅	✅	✅	✅
Freeze / Unfreeze Player	❌	✅	✅	✅	✅
Kick Player from Server	❌	❌	✅	✅	✅
Issue Temporary Ban	❌	❌	✅	✅	✅
Issue Permanent Ban	❌	❌	❌	✅	✅
Modify Live Config	❌	❌	❌	✅	✅
Revoke Bans / Accept Appeals	❌	❌	❌	❌	✅
Assign Admin Roles	❌	❌	❌	❌	✅

---

# Checking Permissions Programmatically

In your custom server scripts:

local RAC = require(game.ServerScriptService.RAC.Engine)
local permissionManager = RAC:GetPermissionManager()

if permissionManager.CanExecute(player, "KICK_PLAYER") then
    print(player.Name .. " is authorized to moderate.")
end

---

# Next Steps

• Explore Discord Webhook Integration.
• Learn about DataStore & Storage Architecture.