Staff & roles

Unlimited staff accounts. Eight built-in roles plus a visual builder for unlimited custom ones. Per-staff permission overrides for the edge cases.

Built-in roles

RoleDefault permissions
OwnerEverything. The Sentinel install belongs to one Owner account.
Co-OwnerEverything except billing-style settings.
AdminAll operational permissions, server config, full punishment range, audit log.
Senior ModeratorAll punishments, manage moderators, access notes & alts.
ModeratorStandard punishments (no permanent bans), reports, tickets, chat view.
HelperWarn, mute, view reports, respond to tickets, view chat.
Trial StaffRead-only on most pages, no punishment authority.
Guest / ViewerDashboard access, audit log only. For auditors and stakeholders.

Custom roles

Open Staff & roles in the dashboard, click New role.

  1. Pick a name, color, and icon. The chip preview updates as you type.
  2. Toggle individual permissions across 9 categories. Use Use moderator preset to start from a sensible base.
  3. Save. The role appears in the picker for every staff member.
Note

Built-in roles can't be edited or deleted. Built them as floors so customers can rebuild from scratch if they go wild with custom roles.

Per-staff overrides

Open a staff member's drawer. Each permission has a tri-toggle:

  • Allow — force-grant, even if the role denies.
  • Inherit — defer to the role.
  • Deny — force-deny, even if the role grants.

Inviting staff

Two ways:

  • Dashboard invite: Staff page, click Invite. Pick username, role, and a temporary password to share. Optionally link a Minecraft name; the account auto-pairs to that UUID.
  • In-game pair: existing staff run /sentinel link, get an 8-digit code, paste it on the login page.

Sign-out everywhere

Settings → Account → Sign out everywhere revokes every active session for the current user. For other staff, owners can hit the same revoke from the staff drawer + reset their password in one go.

Themes per account

Each staff member picks their own theme. Eight built-ins. The choice saves to the account so it follows them between browsers.