--- title: uMod/Oxide Permissions System description: Learn how to use and configure uMod/Oxide Permissions in your Nodecraft hosted Rust server. source: "https://nodecraft.com/support/games/rust/umod-oxide-permissions-system" image: "https://dynamic-assets.nodecraft.com/signedurl/w7vokBAexMnVlnMZ1Q/image.jpg?modifications=W3sibmFtZSI6ImdhbWVfYmciLCJpbWFnZV91cmwiOiJodHRwczovL2Ntcy1hLm5vZGVjcmFmdC5jb20vZi8xMzM5MzIvMjAwMHg1NTAvNjhhMDFhYTlkMi9ydXN0LWxhbmRpbmctYmFubmVyLTEtMi0xLnBuZy9tLyJ9LHsibmFtZSI6ImdhbWVfbG9nbyIsImltYWdlX3VybCI6Imh0dHBzOi8vY21zLWEubm9kZWNyYWZ0LmNvbS9mLzEzMzkzMi8zNzV4MTUwLzZiZjZlNTUxYzIvbG9nby5wbmcvbS8ifSx7Im5hbWUiOiJjdGFfdGV4dCIsInRleHQiOiJDcmVhdGUgeW91ciBvd24gc2VydmVyISJ9LHsibmFtZSI6InRleHQiLCJ0ZXh0IjoidU1vZC9PeGlkZSBQZXJtaXNzaW9ucyBTeXN0ZW0ifV0&s=a3f05c35aa1c3cbc2ee1d773569e3a625837285bc5c9957a4c033ff51586ae86" published: "2019-07-11T20:34:04.103Z" updated: "2021-01-18T19:30:00.000Z" --- # uMod/Oxide Permissions System Learn how to use and configure uMod/Oxide Permissions in your Nodecraft hosted Rust server. Many of the special features added by plugins in the game Rust will not automatically work for players or groups, unless special "permissions" are given to use them. You do this by connecting to the server with an RCON tool, and giving special commands to the server, which are used by an entire **permissions system** that is built into the uMod/Oxide plugin framework. When a player or group has the correct permissions tags added in this permissions system, they will be allowed to use the special abilities or features of the plugin. Not all plugins require these permissions tags. Some plugins work automatically for all players, as soon as they are added to the server. But if any plugin adds special powers you don't want everyone to have (turn invisible, walk through walls, etc), then you need to use the permissions system and the permissions tags to control who can and cannot use those plugin abilities. ## An Important Thing About Permissions Systems Like almost all permissions systems, its **automatic answer** to "can someone use this ability?" is "**NO!!!!!!**". A really big loud "**NO!**". The automatic default answer of permissions systems is to say NO. All the time, every time, to any request to use anything. Forever. Unless you have added a "Yes" answer to their permissions, which allows them to use it. The vast majority of plugins will not work at all **until you add permissions** for them, either to each individual player or to a whole group (that the player belongs to). Until you add permissions, every time you try to use a command, the uMod/Oxide permissions system will just keep saying "nope, nada, uh uh, ain't gettin' past me, not happenin', not on my watch!". That is it's job, it's designed to say NO. ## Does a Plugin Have Permissions? When you view a plugin on uMod, if there is a section in the description that begins with "# Permissions", then yes it does. Underneath that will be listed the permissions and what they do. Some are really simple. The "Whitelist" plugin by Wulf has only one, `whitelist.allow`. Add that, and you're allowed to join a server. Without it, you can't join. Simple. Some are more complex, a lot more complex. Below are the permissions for the "Vanish" plugin. ![A view of the permissions for the vanish plugin on Umod](https://s3-assets.nodecraft.com/attachments/R2jVw4NVQZiRx2654FYg_Umod_mods_Umod_permissions.png) This one is a little trickier! The basic `vanish.use` is needed to even use the invisibility, without that permissions, you can't even turn invisible. But then the other settings change how it works. If you don't have `vanish.damage.players`, you cannot hurt anyone while you are invisible. Another controls if you can damage a building, or an animal while invisible. There are other settings to make your weapons invisible too, to make you invulnerable while invisible, etc, etc. And all of this is just to control how a single plugin works. ## How to Add Permissions Before you can add permissions, there's a few things you need to set up beforehand. We have guides in our knowledgebase on most of this already, so rather then repeat it all, there are links below for each step. ### You Need an RCON Tool Without an RCON, your Rust server is like a car with no steering wheel. Or a brake pedal, gas pedal, speedometer, gas gauge, or even knobs on the radio. You pretty much can't do anything on your Rust server, without some kind of RCON program. The RCON is how you send instructions to the server (and Oxide too) on what to do, and see feedback on what it's doing behind the scenes. Our guide on how to install and setup "RustAdmin", which is one of many different RCON tools, is here: https://nodecraft.com/support/games/rust/setting-up-the-rust-admin-rcon-tool ### Become an Admin First We have a guide on how to set yourself as an admin on your Rust server here: https://nodecraft.com/support/games/rust/become-admin-on-a-nodecraft-rust-server ### Groups! Groups! Groups! The more efficient way to add permissions, is to create a **group** first, and then assign permissions to the entire group. Then you set which players are in that group. This is more work in the beginning, but pays off **BIG TIME** in the long run. When you want to make changes, you just edit the permissions for the whole group, and it changes on all the players in that group. As opposed to having to go into each separate player and add, delete, or change the permissions, and then the next player, and the next player. Additionally, using groups is a good way to not forget you left a permissions turned by accident. As an example... Let's say, you passed a permission out like candy one day, but then later on you decided it was too powerful and removed it from everyone's list. Except, you forgot bob. Bob hasn't played in a long time. Bob was kind of a... well, you know what. You were glad when Bob stopped playing. But out of the blue, Bob does join the server, realizes they still have this superpower (like turn invisible), and goes on a rampage across the server. Oof. Big mess. Many unhappy players. Much griping is heard unto the admins (even less time playing, while you clean up the mess). Using groups are a great way to make sure you don't accidentally leave an ability turned on. Change it in one place, change it for everyone. ## uMod/Oxide Commands In the following sections are the commands for the uMod/Oxide permissions system. Theses commands are universal to uMod by the way, so they will work in any other game using uMod, not just Rust. In the syntax for many commands, you will see multiple words enclosed by `<` and `>`. That means you have replace it with one of the terms between the `<` and `>`. The `<` and `>` are **not** typed as part of the command. In the commands you can also use a username or a Steam64ID number. We prefer to use the Steam64ID number, but they're not exactly user friendly, and if you have many players it can be hard to remember which number is which player. For example the command: ``` oxide.grant / ``` Means that you can use "user" or "group". They are just variables for the basic command `oxide.grant`, so the same command can be ``` oxide.grant user genericplayername ``` or ``` oxide.grant group genericgroupname ``` Examples: ``` oxide.grant user playername vanish.use oxide.grant user playername whitelist.allow ``` On all the following commands, the word "oxide" can also be shortened to just the letter "o". So `oxide.grant` can be replaced with `o.grant`. ## Adding and Removing Permissions for Players ### `oxide.grant` This command will add a permission to a player. ``` oxide.grant user ``` ### `oxide.revoke` This command will remove a permission from a player. ``` oxide.revoke user ``` ### The Permissions Wildcard If you replace the **permission** with just an asterisk (`*`), it gives that player access to **ALL** permissions installed on the server. Use that carefully; that can get scary. ``` oxide.grant user * ``` ## Adding and Removing Permissions for Groups These are basically the same command from the player section, but "user" is replaced with "group" ### `oxide.grant` This command will add a permission to a group. ``` oxide.grant group ``` ### `oxide.revoke` This command will remove a permission from a group. ``` oxide.revoke group ``` ### The Permissions Wildcard Just like with a single player, if you replace the **permission** with just an asterisk (`*`), it gives that entire group access to **ALL** permissions installed on the server. In the case of an entire group, this is even scarier then a single player with the wildcard. ``` oxide.grant group * ``` ## Listing Permissions for Players and Groups ### `oxide.show player` Shows all the permissions granted to a specific player ``` oxide.show player ``` ### `oxide.show perm` This will show all players or groups which have been granted a specific permission. ``` oxide.show perm ``` ## Creating and Removing Groups uMod/Oxide has two default groups "user" and "admin", any other groups you wish to have will have to be created. ### `oxide.group add` This command will create a whole new group, with whatever text you use for `` ``` oxide.group add ``` ### `oxide.group remove` This command will remove an existing group ``` oxide.group remove ``` ### `oxide.group parent` This command sets the parent and/or child group for a group. This is useful for inheriting default permissions from one group to another, which is a faster and easier way to set up permissions for multiple groups. All the permissions of a "parent" group will be automatically be given to the "child" group, so you can quickly stack up groups, and only add new permissions to each new one. This greatly reduces the amount of work required to create groups. ``` oxide.group parent ``` ### `oxide.group set` This creates a short description for a group, which can be used for things like chat titles ``` oxide.group set "[sample text]" ``` Only replace the `sample text` portion. The "`[` and `]`" are part of the command. ## Adding and Removing Players from Groups ### `oxide.usergroup add` This command will add a player to a specific group ``` oxide.usergroup add ``` ### `oxide.usergroup remove` This command will remove a player from a group ``` oxide.usergroup remove ```