Protection
Trusted people
In short
Trusted people are never punished by Bastion. The server owner is always trusted. Most servers should add nobody else, or one person at most.
What trusted means
A trusted person skips Bastion's checks. They can delete as many channels as they like, ban as many people as they like and post as fast as they like. Bastion won't step in.
| Check | Does a trusted person skip it? |
|---|---|
| Anti-Nuke limits | Yes |
| Dangerous permission blocking | Yes |
| Automod and heat | Yes |
| Adding bots through the Join Gate | Yes, they may add bots |
| Panic mode | Yes, it won't fire for them |
| Join Gate checks on their own account | Yes |
| Quarantine | Yes. Bastion won't quarantine them, even on a moderator's command |
Trusted people can also use every Bastion command, including /setup, /lockdown and /backup, whatever their roles are. The limits on moderation commands don't apply to them either: they can /ban, /kick, /quarantine add and /purge as often as they like. The server owner is always trusted. You can't remove the owner from the list, and you don't need to add them.
Trusted people and the dashboard
Being trusted also decides what someone can change in the dashboard. Anti-Nuke, the Join Gate, Anti-Raid, Verification, Logs, Backups, moderator roles and the security level can only be changed by the owner and trusted people. Other admins can open those pages but not save them.
A trusted person still needs Manage Server or Administrator to open the dashboard at all. Being on the list doesn't let them in on its own.
The trusted list itself is stricter still. Only the server owner can add or remove people. A trusted person can't add another.
CarefulOnly add people you'd hand the whole server to. If a trusted account is hacked, Bastion won't stop it.
How many is too many
You can add up to 10 people. You almost certainly shouldn't.
- Zero is right for most servers. The owner is already covered.
- One makes sense for a co-owner who does real building work.
- Two is the most you can have and still pass the trusted check in your security score.
- Three or more costs you 5 points, and each extra person is one more account that could be stolen.
Add or remove someone
Open People
In the dashboard, choose your server and open the People page. Only the server owner can change this list.
Add the person
Under Trusted people, paste the person's user ID and press Enter. To get an ID, switch on Developer Mode in Discord, right-click the person and choose Copy User ID.
Save
Press Save. It takes effect straight away. Bastion posts an alert in your security log channel naming the person who was added, and sends the owner a private message.
To remove someone, press the cross next to their name and save. Trust is given to people, not to roles. That's on purpose: a role can be handed to someone else in a second.
Trusted isn't the same as staff
Your moderators don't need to be trusted. Three different things are easy to mix up:
| Thing | What it gives | Who it's for |
|---|---|---|
| Trusted people | Skips every Bastion check. | A co-owner, at most. |
| Moderator roles | Lets a role use Bastion's moderation commands. | Your staff. |
| Roles automod ignores | Skips automod only. | Staff, or anyone who posts a lot. |
A moderator who bans people through /ban is working inside Bastion, with a case saved each time. They don't need trust for that. Their bans and kicks count towards the Anti-Nuke limits, which is what you want from a staff account.
Good reasons to trust someone
- They're rebuilding the server and need to create and delete many channels today. Remove them from the list when the work is done.
- They're a co-owner who needs to add bots.
Bad reasons
- They're an admin. Admins are exactly who anti-nuke is watching.
- They got timed out once. Add their role under Roles automod ignores in Automod and leave anti-nuke on for them.
- They asked.
TipAsk every trusted person to switch on two-factor login for their Discord account. It's the cheapest protection there is.
Will it punish me?
Not if you're the server owner. Owners are always trusted. Everyone else follows the limits unless you add them here.
Can I trust a bot?
Yes. A bot that keeps setting off anti-nuke, such as a ticket bot, can be added by pasting its user ID, the same way as a person. Only do this for well-known bots you rely on. See troubleshooting.
My co-owner was quarantined.
They went over an anti-nuke limit. Run /quarantine remove, then add them here if they truly need it.
Who can change the list?
Only the server owner. Other people who can open the dashboard can see the list but can't change it. That includes trusted people.
I got a message saying someone was added to the trusted list.
Bastion sends that to the owner whenever the list grows. Only the owner's own Discord account can change the list. If it wasn't you, change your Discord password, switch on two-factor login, then remove the person on the People page.
Last updated