Reference
Permissions
In short
Bastion asks for 14 named permissions and doesn't ask for Administrator. Each one maps to a job it does. If one is missing, /status tells you which.
Why not just Administrator
Administrator is every permission at once. Many bots ask for it because it's easy. Bastion asks only for what it uses, so you can see exactly what it's able to do in your server.
The full list
| Permission | Why Bastion needs it | Used by |
|---|---|---|
| View Audit Log | To see who deleted a channel, banned a member, changed a role or added a bot. Without it, anti-nuke can't tell who did what and every new bot is treated as unauthorised. | Anti-Nuke, Join Gate |
| Manage Roles | To remove roles and give the Quarantined role, hand out the verified role, undo dangerous permission changes, lock channels and rebuild roles. | Quarantine, Verification, Lockdown, Backups |
| Manage Channels | To lock and unlock channels, set slowmode, hide channels from the Quarantined role, create the bastion-logs channel and rebuild deleted channels. | Lockdown, Backups, /slowmode, /setup |
| Manage Server | To pause invites during a raid. | Anti-Raid |
| Kick Members | To remove raid accounts, unauthorised bots, bots that go over an anti-nuke limit, people who don't verify in time and anyone you kick by command. | Anti-Raid, Join Gate, Anti-Nuke, Verification, /kick |
| Ban Members | To ban and unban. | Anti-Raid, Join Gate, Anti-Nuke, /ban, /unban, /lockdown joins |
| Timeout Members | To time out spammers. Discord also calls this Moderate Members. | Automod, Join Gate, /timeout, /untimeout, warn steps |
| Manage Messages | To delete spam and to clear messages in bulk. | Automod, /purge |
| Manage Webhooks | To delete a webhook that's being used for spam. | Automod |
| View Channels | To see the channels it protects. | Everything |
| Send Messages | To post logs, including message logs, the welcome message and the Verify button. | Logs, Verification |
| Embed Links | To post log entries and the Verify message as tidy cards. | Logs, Verification |
| Attach Files | To show the captcha picture. | Verification |
| Read Message History | To find recent messages when you purge. | /purge |
Permissions are only half of it
A permission says what Bastion may do. Role position says who it may do it to. A bot with Ban Members still can't ban someone whose top role is above the bot's own.
CarefulDrag the Bastion role to the top of your role list. With every permission but a low role, Bastion can't stop an admin. See the setup guide.
Check what's missing
Run /status
It lists any missing permission by name.
Open Server Settings, then Roles
Select the Bastion role and open its Permissions tab.
Tick what's missing
Save changes.
Run /status again
The permissions check should now pass. It's worth 10 points on your security score.
Channel overrides
A channel can have its own rules that override a role. If Bastion has a permission on its role but still can't act in one channel, that channel is denying it.
Open the channel, choose Edit Channel, then Permissions. Add the Bastion role and allow View Channel, Send Messages and Embed Links. Private staff channels are the usual cause, and it matters most for your log channel.
What Bastion doesn't ask for
- Administrator. Not needed.
- Manage Nicknames. Only needed for
/nick cleanand the Clean up unreadable nicknames setting. The invite doesn't ask for it and/statusdoesn't check for it. Add it to the Bastion role yourself if you want those, and leave it off if you don't. - Mention @everyone. Bastion never pings your whole server.
- Access to private messages. No bot can read those.
TipIt's fine to give Bastion Administrator if you find that simpler. It doesn't need it, and it works the same either way.
Can I untick some of these?
You can, but the feature that needs it stops working and your security score drops by 10. View Audit Log, Manage Roles and Kick Members matter most.
Why does a security bot need to manage roles?
Quarantine works by removing roles. Without Manage Roles, Bastion could only kick or ban, and those are much harder to undo.
Is it safe to give a bot this much power?
It's a fair question. Bastion needs the same powers an attacker would use, because stopping them means acting faster with the same tools. Only invite Bastion from the official website.
I ticked everything and it still says missing.
Run /status again so Bastion rechecks. If it still fails, another role with a deny rule on a channel may be in the way.
Last updated