Skip to content

User Management

The KyuubiSoft Panel includes a comprehensive role-based access control (RBAC) system with granular permissions.

  1. Navigate to Users in the sidebar
  2. Click Add User
  3. Enter username and password
  4. Select a role
  5. Click Create
RoleDescriptionAccess Level
AdministratorFull access to all featuresAll permissions
ModeratorPlayer management and monitoringLimited admin
OperatorBasic server operationsOperational
ViewerRead-only accessView only
  • Click on a user to edit their details
  • Change password or role assignment
  • Delete users (cannot delete your own account)
  1. Navigate to PermissionsRoles
  2. Click Create Role
  3. Enter role name and select color
  4. Assign permissions
  5. Save

The system includes 68 permissions across 19 categories:

PermissionDescription
dashboard.viewView dashboard
dashboard.statsView dashboard statistics
PermissionDescription
server.view_statusView server status
server.startStart the server
server.stopStop the server
server.restartRestart the server
server.quick_settingsModify quick settings
PermissionDescription
console.viewView console output
console.executeExecute commands
PermissionDescription
performance.viewView performance metrics

Player Permissions (17 granular permissions)

Section titled “Player Permissions (17 granular permissions)”
PermissionDescription
players.viewView player list and inventories
players.editEdit player data
players.kickKick players
players.banBan players
players.unbanUnban players
players.whitelistManage whitelist
players.opGrant/revoke operator
players.permissionsManage player permissions
players.teleportTeleport players
players.killKill players
players.respawnRespawn players
players.gamemodeChange player gamemode
players.giveGive items to players
players.healHeal players
players.effectsApply/clear effects
players.clear_inventoryClear player inventory
players.messageSend messages to players
PermissionDescription
chat.viewView chat logs
chat.sendSend chat messages
PermissionDescription
backups.viewView backup list
backups.createCreate backups
backups.restoreRestore backups
backups.deleteDelete backups
backups.downloadDownload backups
PermissionDescription
scheduler.viewView scheduled tasks
scheduler.editCreate/edit/delete tasks
PermissionDescription
worlds.viewView worlds
worlds.manageManage world settings
PermissionDescription
mods.viewView installed mods
mods.installInstall new mods
mods.deleteRemove mods
mods.configEdit mod configs
mods.toggleEnable/disable mods
PermissionDescription
plugins.viewView installed plugins
plugins.installInstall plugins
plugins.deleteRemove plugins
plugins.configEdit plugin configs
plugins.toggleEnable/disable plugins
PermissionDescription
config.viewView configurations
config.editEdit configurations
PermissionDescription
assets.viewView and download assets
assets.manageExtract and manage assets
PermissionDescription
users.viewView user list
users.createCreate users
users.editEdit users
users.deleteDelete users
PermissionDescription
roles.viewView roles
roles.manageCreate/edit/delete roles
PermissionDescription
activity.viewView activity log
activity.clearClear activity log
PermissionDescription
hytale_auth.manageManage Hytale authentication
PermissionDescription
settings.viewView panel settings
settings.editEdit panel settings
PermissionDescription
updates.viewView update status
updates.checkCheck for updates
updates.downloadDownload updates
updates.applyApply updates
updates.configConfigure update settings

Typical moderator permissions:

- server.view_status
- console.view
- console.execute
- players.view
- players.kick
- players.ban
- players.unban
- players.whitelist
- chat.view
- chat.send

For players who only need building access:

- server.view_status
- players.view
- worlds.view

Dedicated backup management:

- server.view_status
- backups.view
- backups.create
- backups.restore
- backups.download
- scheduler.view
- scheduler.manage
  1. Principle of Least Privilege

    • Only grant permissions users actually need
    • Use custom roles for specific tasks
  2. Strong Passwords

    • Minimum 12 characters
    • Mix of letters, numbers, symbols
    • Unique per user
  3. Regular Audits

    • Review user accounts periodically
    • Check activity logs for suspicious actions
    • Remove inactive accounts
  4. Separate Admin Account

    • Don’t use admin account for daily tasks
    • Create personal accounts for each admin

All admin actions are logged:

  • User logins/logouts
  • Server start/stop/restart
  • Configuration changes
  • Player actions (kick, ban, etc.)
  • Backup operations
  • User management changes

View the activity log at Activity Log in the sidebar.