Editing User groups

{{Help navigation|usergroups|header=Default user groups|description=User groups are bundles of user permissions which allow users to do certain actions. Learn about how these work on SkyWiki.|keywords=skywiki admin, skywiki bureaucrat, skywiki user groups, skywiki user permissions}}
'''User groups''' (also sometimes referred to as ''flags'') are bundles which contain '''user permissions''' assigned to them. Users can then be promoted to these user groups to allow them to use all the permissions within the user group.

This article covers the default user groups on SkyWiki wikis and the permissions they have assigned to them. Some wikis may choose to add or remove permissions from a group or completely delete a user group, so this guide may not be indicative or accurate on some wikis which have chosen to deviate from the default user groups and permissions. No wiki, however, can delete a restricted local group or a global group.


== Local groups ==

'''Local groups''' are all groups which only have power on one wiki, their local wiki. Unlike global groups which can do certain actions on all SkyWiki wikis, local groups only have power on one wiki.

Below is a list of all local groups as they are by default and includes ''restricted'' user groups which only [[Special:MyLanguage/Stewards|Stewards]] can assign.

=== {{int:Group-bureaucrat}} ===

'''Bureaucrat''' is the highest local group a user can obtain by default. Bureaucrats can promote and demote administrators and interface administrators. Additionally, bureaucrats are not affected by rate limits, can override local account spoofing checks in [[mw:Extension:AntiSpoof|AntiSpoof]], can access [[Special:MyLanguage/ManageWiki|ManageWiki]], and can edit interwiki data.

By default, bureaucrats '''''cannot''''' be demoted by other bureaucrats, only [[Special:MyLanguage/Stewards|Stewards]] may do that. Bureaucrats also hold an immense amount of power locally. '''Only promote trusted users to bureaucrat'''. If you are a bureaucrat, you can request other bureaucrats be demoted on the Steward requests (granted you have a good reason for it such as bureaucrat or community consensus, resignation, or another good reason).

The bureaucrat group alone does not give users the ability to do many tasks often associated with being an administrator, such as banning users and deleting pages. To achieve all of that, you must also be an administrator. 

{{collapse top|Click "Expand" to see this group's permissions}}
{| class="wikitable" style="margin: 1em auto 1em auto;"
! #
! Permission
! {{int:Massmessage-create-description}}
|-
| 1
| noratelimit
| {{int:right-noratelimit}}
|-
| 2
| override-antispoof
| {{int:right-override-antispoof}}
|-
| 3
| managewiki
| {{int:right-managewiki}}
|-
| 4
| interwiki
| {{int:right-interwiki}}
|-
|}
{{collapse bottom}}

=== {{int:Group-sysop}} ===
'''Administrator''' (in the "<code>sysop</code>" group) is the second-highest local group a user can obtain by default. Administrators can block users, protect or delete pages, among many other administrative duties. 

By default, administrators may only be demoted by bureaucrats and may not demote or promote others to administrator. Administrators can promote and demote users to autopatrolled, confirmed or rollbacker.

{{collapse top| Click "Expand" to see this group's permissions}}
{| class="wikitable" style="margin: 1em auto 1em auto;"
! #
!  Permission
! {{int:Massmessage-create-description}}
|-
| 1
| apihighlimits
| {{int:right-apihighlimits}}
|-
| 2
| autoconfirmed
| {{int:right-autoconfirmed}}
|-
| 3
| autopatrol
| {{int:right-autopatrol}}
|-
| 4
| block
| {{int:right-block}}
|-
| 5
| blockemail
| {{int:right-blockemail}}
|-
| 6
| browsearchive
| {{int:right-browsearchive}}
|-
| 7
| createaccount
| {{int:right-createaccount}}
|-
| 8
| delete
| {{int:right-delete}}
|-
| 9
| deletechangetags
| {{int:right-deletechangetags}}
|-
| 10
| deletedhistory
| {{int:right-deletedhistory}}
|-
| 11
| deletedtext
| {{int:right-deletedtext}}
|-
| 12
| deletelogentry
| {{int:right-deletelogentry}}
|-
| 13
| deleterevision
| {{int:right-deleterevision}}
|-
| 14
| editinterface
| {{int:right-editinterface}}
|-
| 15
| editprotected
| {{int:right-editprotected}}
|-
| 16
| editsemiprotected
| {{int:right-editsemiprotected}}
|-
| 17
| editsitecss
| {{int:right-editsitecss}}
|-
| 18
| editsitejson
| {{int:right-editsitejson}}
|-
| 19
| editsitejs
| {{int:right-editsitejs}}
|-
| 20
| editusercss
| {{int:right-editusercss}}
|-
| 21
| edituserjson
| {{int:right-edituserjson}}
|-
| 22
| edituserjs
| {{int:right-edituserjs}}
|-
| 23
| import
| {{int:right-import}}
|-
| 24
| importupload
| {{int:right-importupload}}
|-
| 25
| ipblock-exempt
| {{int:right-ipblock-exempt}}
|-
| 26
| managechangetags
| {{int:right-managechangetags}}
|-
| 27
| markbotedits
| {{int:right-markbotedits}}
|-
| 28
| mergehistory
| {{int:right-mergehistory}}
|-
| 29
| move
| {{int:right-move}}
|-
| 30
| movefile
| {{int:right-movefile}}
|-
| 31
| move-categorypages
| {{int:right-move-categorypages}}
|-
| 32
| move-rootuserpages
| {{int:right-move-rootuserpages}}
|-
| 33
| move-subpages
| {{int:right-move-subpages}}
|-
| 34
| noratelimit
| {{int:right-noratelimit}}
|-
| 35
| patrol
| {{int:right-patrol}}
|-
| 36
| patrolmarks
| {{int:right-patrolmarks}}
|-
| 37
| protect
| {{int:right-protect}}
|-
| 38
| reupload
| {{int:right-reupload}}
|-
| 39
| reupload-shared
| {{int:right-reupload-shared}}
|-
| 40
| rollback
| {{int:right-rollback}}
|-
| 41
| suppressredirect
| {{int:right-suppressredirect}}
|-
| 42
| unblockself
| {{int:right-unblockself}}
|-
| 43
| undelete
| {{int:right-undelete}}
|-
| 44
| unwatchedpages
| {{int:right-unwatchedpages}}
|-
| 45
| upload
| {{int:right-upload}}
|-
| 46
| upload_by_url
| {{int:right-upload_by_url}}
|-
| 47
| abusefilter-modify
| {{int:right-abusefilter-modify}}
|-
| 48
| abusefilter-log-detail
| {{int:right-abusefilter-log-detail}}
|-
| 49
| abusefilter-modify-restricted
| {{int:right-abusefilter-modify-restricted}}
|-
| 50
| abusefilter-revert
| {{int:right-abusefilter-revert}}
|-
| 51
| override-antispoof
| {{int:right-override-antispoof}}
|-
| 52
| skipcaptcha
| {{int:right-skipcaptcha}}
|-
| 53
| generate-dump
| {{int:right-generate-dump}}
|-
| 54
| delete-dump
| {{int:right-delete-dump}}
|-
| 55
| view-dump
| {{int:right-view-dump}}
|-
| 56
| globalblock-whitelist
| {{int:right-globalblock-whitelist}}
|-
| 57
| nuke
| {{int:right-nuke}}
|-
| 58
| tboverride
| {{int:right-tboverride}}
|-
| 59
| massmessage
| {{int:right-massmessage}}
|-
|}
{{collapse bottom}}

=== {{int:Group-interface-admin}} === 

'''Interface administrator''' (in the "<code>interface-admin</code>" group) is a group which allows users to edit the MediaWiki namespace (which contains all system messages) along with sitewide and personal CSS, JavaScript, and JSON. Because editing the interface for the entire wiki or for certain users can lead to potential security issues, you should '''be careful who you give this to'''! Only give it to trusted users.

By default, interface administrators may be promoted or demoted by bureaucrats only.

{{collapse top|Click "Expand" to see this group's permissions}}
{| class="wikitable" style="margin: 1em auto 1em auto;"
! #
! Permission
! {{int:Massmessage-create-description}}
|-
| 1
| editinterface
| {{int:right-editinterface}}
|-
| 2
| editsitecss
| {{int:right-editsitecss}}
|-
| 3
| editsitejson
| {{int:right-editsitejson}}
|-
| 4
| editsitejs
| {{int:right-editsitejs}}
|-
| 5
| editusercss
| {{int:right-editusercss}}
|-
| 6
| edituserjson
| {{int:right-edituserjson}}
|-
| 7
| edituserjs
| {{int:right-edituserjs}}
|-
|}
{{collapse bottom}}

=== {{int:Group-bot}} === 

'''Bot''' (in the "<code>bot</code>" group) is a group which classifies a user as an automated process or bot. These users have their edits hidden in the Recent Changes by default to prevent them from clogging the page (though you can view their recent actions by removing the "{{int:rcfilters-filter-humans-label}}" filter in Special:RecentChanges). In addition to that, they have certain other permissions assigned to them to prevent them from getting caught in the CAPTCHAs, prevent them from getting caught in IP-based rate limits, among a few other permissions to prevent any interference for legitimate bots.

By default, bots may be promoted or demoted by bureaucrats only.

{{collapse top|Click "Expand" to see this group's permissions}}
{| class="wikitable" style="margin: 1em auto 1em auto;"
! #
! Permission
! {{int:Massmessage-create-description}}
|-
| 1
| apihighlimits
| {{int:right-apihighlimits}}
|-
| 2
| autoconfirmed
| {{int:right-autoconfirmed}}
|-
| 3
| autopatrol
| {{int:right-autopatrol}}
|-
| 4
| bot
| {{int:right-bot}}
|-
| 5
| editsemiprotected
| {{int:right-editsemiprotected}}
|-
| 6
| nominornewtalk
| {{int:right-nominornewtalk}}
|-
| 7
| suppressredirect
| {{int:right-suppressredirect}}
|-
| 8
| skipcaptcha
| {{int:right-skipcaptcha}}
|-
|}
{{collapse bottom}}

=== {{int:Group-rollbacker}} === 

'''Rollbacker''' (in the "<code>rollback</code>" group) is a group which allows users to quickly revert all the edits made by the last user who edited a certain page. The ability to rollback is '''already included in the administrator toolset''' so you do not need to promote administrators to this group for them to be able to roll back edits.

By default, rollbackers may be promoted or demoted by administrators.

{{collapse top|Click "Expand" to see this group's permissions}}
{| class="wikitable" style="margin: 1em auto 1em auto;"
! #
! Permission
! {{int:Massmessage-create-description}}
|-
| 1
| rollback
| {{int:right-rollback}}
|-
|}
{{collapse bottom}}

=== {{int:Group-autopatrolled}} === 

'''Autopatrolled''' (in the "<code>autopatrolled</code>" group) is a group which allows users' edits to be automatically 'patrolled' (marked as "reviewed") and prevent them from appearing in the Recent Changes with a red exclamation point. These users can also mark other's edits as reviewed. This permission is typically granted to users who have shown that they don't need to be monitored. 

By default, autopatrolled users may be promoted or demoted by administrators.

{{collapse top|Click "Expand" to see this group's permissions}}
{| class="wikitable" style="margin: 1em auto 1em auto;"
! #
! Permission
! {{int:Massmessage-create-description}}
|-
| 1
| autopatrol
| {{int:right-autopatrol}}
|-
| 2
| patrol
| {{int:right-patrol}}
|-
| 3
| patrolmarks
| {{int:right-patrolmarks}}
|-
| 4
| skipcaptcha
| {{int:right-skipcaptcha}}
|-
|}
{{collapse bottom}}

=== {{int:Group-confirmed}} ===

'''Confirmed users''' (in the "<code>confirmed</code>" group) are users who can bypass certain restrictions set on new accounts, such as CAPTCHAs, and can edit pages protected against non-(auto)confirmed users. This is done to prevent spam.

By default, confirmed users may be promoted or demoted by administrators.

Confirmed users are granted these permissions by default:

{{collapse top|Click "Expand" to see this group's permissions}}
{| class="wikitable" style="margin: 1em auto 1em auto;"
! #
! Permission
! {{int:Massmessage-create-description}}
|-
| 1
| autoconfirmed
| {{int:right-autoconfirmed}}
|-
| 2
| editsemiprotected
| {{int:right-editsemiprotected}}
|-
| 3
| skipcaptcha
| {{int:right-skipcaptcha}}
|-
|}
{{collapse bottom}}

=== {{int:Group-autoconfirmed}} ===

'''Autoconfirmed users''' (in the "<code>autoconfirmed</code>" group) are users who can bypass certain restrictions set on new accounts such as CAPTCHAs, and can edit pages protected against non-autoconfirmed users just as those in the "<code>confirmed</code>" group, ''except'' that they are, by default, '''automatically''' promoted to <code>autoconfirmed</code> after their account reaches 4 days of existence and 10 edits made. If you don't wish to wait that long, you can forcefully promote a user to <code>confirmed</code> to allow them to bypass CAPTCHAs and edit semi-protected pages without meeting the threshold for automatic promotion to autoconfirmed. This is done to prevent spam.

In addition to the above, autoconfirmed users are also given these permissions:

{{collapse top|Click "Expand" to see this group's permissions}}
{| class="wikitable" style="margin: 1em auto 1em auto;"
! #
! Permission
! {{int:Massmessage-create-description}}
|-
| 1
| createaccount
| {{int:right-createaccount}}
|-
| 2
| mwoauthproposeconsumer
| {{int:right-mwoauthproposeconsumer}}
|-
| 3
| mwoauthupdateownconsumer
| {{int:right-mwoauthupdateownconsumer}}
|-
|}
{{collapse bottom}}

=== {{int:Group-member}} ===

'''Member''' (in the "<code>member</code>" group) is a group given to users on '''private wikis''' which allows them to read a wiki. Apart from being able to read the wiki, they hold no other special permission.

By default, members may be promoted or demoted by administrators.

{{collapse top|Click "Expand" to see this group's permissions}}
{| class="wikitable" style="margin: 1em auto 1em auto;"
! #
! Permission
! {{int:Massmessage-create-description}}
|-
| 1
| read
| {{int:right-read}}
|-
|}
{{collapse bottom}}

=== {{int:Group-user}} === 

'''User''' (in the "<code>user</code>" group) is a group that is made up of ''all'' registered users, whether they have any advanced group or not.

No one can revoke the <code>user</code> user group from a user. Though they can be banned, they can never lose their <code>user</code> group.
{{collapse top| Click "Expand" to see this group's permissions}}
{| class="wikitable" style="margin: 1em auto 1em auto;"
! #
!  Permission
! {{int:Massmessage-create-description}}
|-
| 1
| applychangetags
| {{int:right-applychangetags}}
|-
| 2
| changetags
| {{int:right-changetags}}
|-
| 3
| createpage
| {{int:right-createpage}}
|-
| 4
| createtalk
| {{int:right-createtalk}}
|-
| 5
| edit
| {{int:right-edit}}
|-
| 6
| editcontentmodel
| {{int:right-editcontentmodel}}
|-
| 7
| editmyusercss
| {{int:right-editmyusercss}}
|-
| 8
| editmyuserjson
| {{int:right-editmyuserjson}}
|-
| 9
| editmyuserjs
| {{int:right-editmyuserjs}}
|-
| 10
| minoredit
| {{int:right-minoredit}}
|-
| 11
| move
| {{int:right-move}}
|-
| 12
| movefile
| {{int:right-movefile}}
|-
| 13
| move-categorypages
| {{int:right-move-categorypages}}
|-
| 14
| move-rootuserpages
| {{int:right-move-rootuserpages}}
|-
| 15
| move-subpages
| {{int:right-move-subpages}}
|-
| 16
| purge
| {{int:right-purge}}
|-
| 17
| reupload
| {{int:right-reupload}}
|-
| 18
| reupload-shared
| {{int:right-reupload-shared}}
|-
| 19
| sendemail
| {{int:right-sendemail}}
|-
| 20
| upload
| {{int:right-upload}}
|-
| 21
| torunblocked
| {{int:right-torunblocked}}
|-
|}
{{collapse bottom}}

=== {{int:Group-*}} === 


{{int:Group-*}} (in the "<code>*</code>" group) is a group that is composed of '''all registered and non-registered users'''. This means that this includes both users and IP editors. 

Removing permissions from this group is useful to prevent IP editors from doing certain actions. If you remove a permission from this group, you should ideally move it to the "<code>user</code>" group to allow users to be able to do the action (such as editing).

{{collapse top|Click "Expand" to see this group's permissions}}
{| class="wikitable" style="margin: 1em auto 1em auto;"
! #
! Permission
! {{int:Massmessage-create-description}}
|-
| 1
| createaccount
| {{int:right-createaccount}}
|-
| 2
| createpage
| {{int:right-createpage}}
|-
| 3
| createtalk
| {{int:right-createtalk}}
|-
| 4
| edit
| {{int:right-edit}}
|-
| 5
| abusefilter-log-detail
| {{int:right-abusefilter-log-detail}}
|-
| 6
| abusefilter-view
| {{int:right-abusefilter-view}}
|-
| 7
| abusefilter-log
| {{int:right-abusefilter-log}}
|-
|}
{{collapse bottom}}
=== Restricted local user groups ===

On all wikis, a few groups exist which are not assignable by bureaucrats. These groups are only assignable by users in global groups with the <code>userrights</code>/<code>userrights-interwiki</code> permission in their toolset as all these user groups wield an immense amount of power locally.

==== {{int:Group-checkuser}} ==== 
{{hatnote|For more information (including how to request one), please see [[Special:MyLanguage/CheckUser|CheckUser]].}}
'''CheckUser''' is a special group and tool which allows its wielders (called {{int:Group-checkuser}}) to check users' IP addresses, user-agents, along with some other information. This permission is only used when investigating sockpuppetry or platform abuse and is not assignable by local bureaucrats. CheckUser is, by policy, restricted for use only by [[Special:MyLanguage/Stewards|Stewards]] and [[Special:MyLanguage/Trust and Safety|Trust and Safety]].
{{collapse top| Click "Expand" to see this group's permissions}}
{| class="wikitable" style="margin: 1em auto 1em auto;"
! #
!  Permission
! {{int:Massmessage-create-description}}
|-
| 1
| checkuser
| {{int:right-checkuser}}
|-
| 2
| checkuser-log
| {{int:right-checkuser-log}}
|-
|}
{{collapse bottom}}

==== {{int:Group-oversight}} ==== 
{{hatnote|For more information, please see [[Special:MyLanguage/Oversight|Oversight]]}}
'''Oversight''' is a special group which allows its wielders (called {{int:Group-oversight}}) to completely suppress and hide log entries and revisions from everyone who is not an {{int:Group-oversight}}, including local administrators and even Stewards themselves when they do not have the <code>oversight</code> flag on. It is typically only used to hide personal information and is not assignable by local bureaucrats. Oversight is, by policy, restricted for use only by [[Special:MyLanguage/Stewards|Stewards]] and [[Special:MyLanguage/Trust and Safety|Trust and Safety]].

{{collapse top| Click "Expand" to see this group's permissions}}
{| class="wikitable" style="margin: 1em auto 1em auto;"
! #
!  Permission
! {{int:Massmessage-create-description}}
|-
| 1
| abusefilter-hidden-log
| {{int:right-abusefilter-hidden-log}}
|-
| 2
| abusefilter-hide-log
| {{int:right-abusefilter-hide-log}}
|-
| 3
| browsearchive
| {{int:right-browsearchive}}
|-
| 4
| deletedhistory
| {{int:right-deletedhistory}}
|-
| 5
| deletedtext
| {{int:right-deletedtext}}
|-
| 6
| deletelogentry
| {{int:right-deletelogentry}}
|-
| 7
| deleterevision
| {{int:right-deleterevision}}
|-
| 8
| hideuser
| {{int:right-hideuser}}
|-
| 9
| suppressionlog
| {{int:right-suppressionlog}}
|-
| 10
| suppressrevision
| {{int:right-suppressrevision}}
|-
|}
{{collapse bottom}}

==== Local {{int:Group-steward}} group ==== 

'''Steward''' is a special local group rarely granted by [[Special:MyLanguage/Stewards|{{int:Group-steward}}]] to themselves. This local group differs from the Steward global group in that this group only affects Stewards locally on one wiki. Stewards typically assign themselves this group to manipulate local permissions while on that wiki instead of using Meta to remotely change permissions. Typically, this is in certain circumstances where the local wiki has a custom local user group that does not exist on Meta Wiki and temporarily adding the local <code>bureaucrat</code> to themselves would not work as the custom local user group is hierarchically higher than the local bureaucrat user group.
{{collapse top| Click "Expand" to see this group's permissions}}
{| class="wikitable" style="margin: 1em auto 1em auto;"
! #
!  Permission
! {{int:Massmessage-create-description}}
|-
| 1
| centralauth-usermerge
| {{int:right-centralauth-usermerge}}
|-
| 2
| usermerge
| {{int:right-usermerge}}
|-
| 3
| userrights
| {{int:userrights}}
|-
|}
{{collapse bottom}}