Setting's Permission

The Settings in the Permissions tab enable you to control the settings users can alter within a workspace based on their roles. Rather than providing unrestricted access, you have the option to grant specific permissions associated with particular tasks. For instance, a user responsible for file uploads can allocate permissions to change settings strictly related to file upload while limiting access to other sensitive workspace settings.

Managing permissions with such precision can enhance security, mitigate the risk of inadvertent alterations, and streamline the distribution of duties throughout the workspace.

All settings have permissions to determine which users can access them.

To access the settings, go to Administration > Workspace > Permissions > Settings.

Settings

The following list of settings is not comprehensive. You can find more settings on your workspace.

NameCodebase NameDescription

General > REST API > Allow Getting Everything

API_Allow_Infinite_Count

Allow REST API requests to return all results in one call.

General > REST API > CORS Origin

API_CORS_Origin

General > REST API > Apply permission view-outside-room to api users.list

API_Apply_permission_view-outside-room_on_users-list

Temporary setting to enforce view-outside-room permission to users.

General > REST API > Default Count

API_Default_Count

The default count for REST API results if the consumer did not provided any

Message > Embed Cache Expiration Days

API_EmbedCacheExpirationDays

Embed Cache Expiration Days.

Message > Embed Request User Agent

API_Embed_UserAgent

Message > API_Embed_clear_cache_now

API_Embed_UserAgent

Message > Safe Ports

API_EmbedIgnoredHosts

List of hosts or CIDR addresses, eg. localhost, 127.0.0.1, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16

OAuth > Drupal > Drupal Server URL

API_Drupal_URL

Example: https://domain.com (excluding trailing slash

Embed Link Previews

API_Embed

Whether embedded link previews are enabled or not when a user posts a link to a website

Accounts

Accounts > Allow Anonymous Read

Accounts_AllowAnonymousRead

Accounts > Allow Anonymous Write

Accounts_AllowAnonymousWrite

Accounts > Allow Users to Delete Own Account

Accounts_AllowDeleteOwnAccount

Accounts > Allow Email Change

Accounts_AllowEmailChange

Accounts > Allow Email Notifications

Accounts_AllowEmailNotifications

Accounts > Allow Invisible status option

Accounts_AllowInvisibleStatusOption

Accounts > Allow Password Change

Accounts_AllowPasswordChange

Accounts > Allow Password Change for OAuth users

Accounts_AllowPasswordChangeForOAuthUsers

Accounts > Allow Name Change

Accounts_AllowRealNameChange

Accounts > Allow User Avatar Change

Accounts_AllowUserAvatarChange

Accounts > Allow User Profile Change

Accounts_AllowUserProfileChange

Accounts > Allow Custom Status Message

Accounts_AllowUserStatusMessageChange

Accounts > Allow Username Change

Accounts_AllowUsernameChang

Accounts > Registration > Allowed DomainsList

Accounts_AllowedDomainsList

Accounts > Avatar > Block Unauthenticated Access

Accounts_AvatarBlockUnauthenticatedAccess

Block Unauthenticated Access to Avatars

Accounts > Avatar > Avatar cache time

Accounts_AvatarCacheTime

Number of seconds the http protocol is told to cache the avatar images.

Accounts > Avatar > Resize Avatars

Accounts_AvatarResize

Accounts > Avatar > Avatar Size

Accounts_AvatarSize

Accounts > Registration > Blocked Domain List

Accounts_BlockedDomainsList

Comma-separated list of blocked domains.

Accounts > Avatar > Resize Avatars

Accounts_AvatarResize

Accounts > Avatar > Avatar External ProviderUrl

Accounts_AvatarExternalProviderUrl

Avatar External Provider URL

Accounts > Registration > Blocked Username List

Accounts_BlockedUsernameLis

Comma-separated list of blocked usernames (case-insensitive)

Accounts > Registration > Accounts_CustomFields_Description

Accounts_CustomFields_Description

Should be a valid JSON where keys are the field names containing a dictionary of field settings

Accounts > Custom Fields to Show in User Info

Accounts_CustomFieldsToShowInUserInfo

Custom Fields to Show in User Info.

Accounts > Registration > Default Username Prefix Suggestion

Accounts_DefaultUsernamePrefixSuggestion

Default Username Prefix Suggestion

Accounts > Default User Preferences > Also Send Thread To Channel Description

Accounts_Default_User_Preferences_alsoSendThreadToChannel

Allow users to select the Also send to channel behavior

Accounts > Default User Preferences > Collapse Embedded Media by Default

Collapse_Embedded_Media_By_Default

Collapse Embedded Media by Default

Accounts > Default User Preferences > Accounts > Convert ASCII to Emoji

Convert_Ascii_Emojis

Convert ASCII to Emoji

Accounts > Default User Preferences > Accounts > Desktop Notification Require Interaction

Notification_RequireInteraction

Require Interaction to Dismiss Desktop Notification

Accounts > Default User Preferences > Accounts > Email Notification Mode

Email_Notification_Mode

Offline Email Notifications

Accounts > Default User Preferences > Accounts > Enable Auto Away

Enable_Auto_Away

Enable Auto Away

Accounts > Default User Preferences > Hide Flex Tab

Hide_flextab

Hide Contextual Bar by clicking outside of it

Accounts > Default User Preferences > Accounts > Hide Roles

Hide_roles

Hide Roles

Accounts > Default User Preferences > Accounts > Hide Usernames

Hide_usernames

Hide Usernames

Accounts > Default User Preferences > Accounts > Idle Time Limit

Idle_Time_Limit

Period of time until status changes to away. Value needs to be in seconds.

Accounts > Default User Preferences > Accounts > Mute Focused Conversations

Mute_Focused_Conversations

Mute Focused Conversations

Accounts > Default User Preferences > Accounts > New Message Notification

New_Message_Notification

New Message Notification

Accounts > Default User Preferences > Accounts > New Room Notification

New_Room_Notification

New Room Notification

Accounts > Default User Preferences > Accounts > Notifications sound volume

Notifications_Sound_Volume

Notifications sound volume

Accounts > Default User Preferences > Accounts > Push Notifications

Accounts_Default_User_Preferences_pushNotifications

Push Notifications Default Alert

Accounts > Default User Preferences > Accounts > Save Mobile Bandwidth

Save_Mobile_Bandwidth

Save Mobile Bandwidth

Accounts > Default User Preferences > Accounts > Display Avatars in Sidebar

Display_Avatars_Sidebar

Display Avatars in Sidebar

Accounts > Default User Preferences > Accounts > Group by Type

Group_by_Type

Group by Type

Accounts > Default User Preferences > Accounts >Use Emojis

Use_Emojis

Use Emojis

Accounts > Default Directory Listing

Accounts_Directory_DefaultView

Default Directory Listing

Accounts > Accounts_EmailOrUsernamePlaceholder

Placeholder_for_email_or_username_login_field

Placeholder for Email or Username Login Field

Accounts > Registration > Only allow verified users to login

Accounts_EmailVerification

Allow onlly verified users to login

Email > Registration > Enrollment Email

Accounts_Enrollment_Email

Enrollment Email

Email > Registration > Accounts_Enrollment_Email Subject

Accounts_Enrollment_Email_Subject_Default

Accounts Enrollment Email Subject

Accounts > Forget User Session on Window Close

Accounts_ForgetUserSessionOnWindowClose

Forget User Session on Window Close

Accounts > Iframe > Api Method

Accounts_Iframe_api_method

Api Method

Accounts > Iframe > API URL

Accounts_Iframe_api_url

API URL

Accounts > Login Expiration in Days

Accounts_LoginExpiration

Login Expiration in Days

Accounts > Registration > Manually Approve New Users

Accounts_ManuallyApproveNewUsers

Manually Approve New Users

OAuth > Apple > Accounts_OAuth_Apple_Id

Accounts_OAuth_Apple

Enable Apple Login

OAuth > Drupal > Drupal Login Enabled

Accounts_OAuth_Drupal

Drupal Login Enabled

OAuth > Drupal > Drupal oAuth2 Redirect URI

Accounts_OAuth_Drupal_callback_url

Drupal oAuth2 Redirect URI

OAuth > Drupal > Drupal oAuth2 Client ID

Accounts_OAuth_Drupal_id

Drupal oAuth2 Client ID

OAuth > Drupal > Drupal oAuth2 Client Secret

Accounts_OAuth_Drupal_secret

Drupal oAuth2 Client Secret

OAuth > Facebook > Facebook Login

Accounts_OAuth_Facebook

Facebook Login

OAuth > Facebook > Facebook App ID

Accounts_OAuth_Facebook_id

Facebook App ID

OAuth > Facebook > Facebook Callback URL

Accounts_OAuth_Facebook_callback_url

Facebook Callback URL

OAuth > GitHub Enterprise > OAuth Enabled

Accounts_OAuth_Github

Enable Github Oauth

OAuth > GitHub Enterprise > GitHub Enterprise Callback URL

Accounts_OAuth_GitHub_Enterprise_callback_url

GitHub Enterprise Callback URL

OAuth > GitHub Enterprise > Client Id

Accounts_OAuth_GitHub_Enterprise_id

Github Enterprise Client Id

OAuth > GitHub Enterprise > Client Secret

Accounts_OAuth_GitHub_Enterprise_secret

Github Enterprise Client Secret

OAuth > GitHub Enterprise > Client Id

Accounts_OAuth_Github_id

Github Enterprise Client Id

OAuth > GitHub > Client Secret

Accounts_OAuth_Github_secret

Github Enterprise Client Secret

OAuth > GitHub > GitHub Enterprise Callback URL

Accounts_OAuth_Github_callback_url

GitHub Callback URL

OAuth > GitHub > Client Id

Accounts_OAuth_Github_id

Github Client ID

OAuth > GitHub > OAuth Enabled

Accounts_OAuth_Github

OAuth Enabled

OAuth > GitLab > OAuth Enabled

Accounts_OAuth_Gitlab

OAuth Enable

OAuth > GitLab > GitLab Callback URL

Accounts_OAuth_Gitlab_callback_url

GitLab Callback URL

OAuth > GitLab > GitLab Id

Accounts_OAuth_Gitlab_id

GitLab Id

OAuth > GitLab > Identity Path

Accounts_OAuth_Gitlab_identity_path

GitLab Identihty Pat

OAuth > GitLab > Merge Users

Accounts_OAuth_Gitlab_merge_users

GitLab Merge Users

OAuth > GitLab > Client Secret

Accounts_OAuth_Gitlab_secret

GitLab Client Secret

OAuth > Linkedin > LinkedIn Login

Accounts_OAuth_Linkedin

LinkedIn Login

OAuth > Linkedin > Linkedin Callback URL

Accounts_OAuth_Linkedin_callback_url

Linkedin Callback URL

OAuth > Linkedin > LinkedIn Id

Accounts_OAuth_Linkedin_id

LinkedIn Id

OAuth > Linkedin > LinkedIn Secret

Accounts_OAuth_Linkedin_secret

LinkedIn Secret

OAuth > Meteor > Meteor Login

Accounts_OAuth_Meteor

Meteor Login

OAuth > Meteor > Meteor Callback URL

Accounts_OAuth_Meteor_callback_url

Meteor Callback URL

OAuth > Meteor > Meteor Id

Accounts_OAuth_Meteor_callback_url

Meteor Callback URL

OAuth > Meteor > Meteor Id

Accounts_OAuth_Meteor_id

Meteor Id

OAuth > Meteor > Meteor Secret

Accounts_OAuth_Meteor_secret

Meteor Secret

OAuth > Nextcloud > OAuth Enabled

Accounts_OAuth_Nextcloud

OAuth Enabled

OAuth > Nextcloud > Nextcloud Server URL

Accounts_OAuth_Nextcloud_URL

Nextcloud Server URL

OAuth > Nextcloud > Nextcloud Callback

Accounts_OAuth_Nextcloud_callback_url

Nextcloud Callback URL

OAuth > Nextcloud > Nextcloud Id

Accounts_OAuth_Nextcloud_id

Nextcloud Id

OAuth > Nextcloud > Client Secret

Accounts_OAuth_Nextcloud_secret

Client Secret

OAuth > Proxy > Proxy Host

Accounts_OAuth_Proxy_host

Proxy Host

OAuth > Proxy > Proxy Services

Accounts_OAuth_Proxy_services

Proxy Services

OAuth > Tokenpass > Tokenpass Login

Accounts_OAuth_Tokenpass

Tokenpass Login

OAuth > Tokenpass >Tokenpass Callback URL

Accounts_OAuth_Tokenpass_callback_url

Tokenpass Callback URL

OAuth > Tokenpass > Tokenpass Id

Accounts_OAuth_Tokenpass_id

Tokenpass Id

OAuth > Tokenpass > Tokenpass Secret

Accounts_OAuth_Tokenpass_secret

Tokenpass Secret

OAuth > Twitter > Twitter Login

Accounts_OAuth_Twitter

Twitter Login

OAuth > Twitter > Twitter Callback URL

Accounts_OAuth_Twitter_callback_url

Twitter Callback URLL

OAuth > Twitter > Twitter Id

Accounts_OAuth_Twitter_id

Twitter Id

OAuth > Twitter > Twitter Secret

Accounts_OAuth_Twitter_secret

Twitter Secret

OAuth > WordPress > WordPress Login

Accounts_OAuth_Wordpress

WordPress Login

OAuth > WordPress > Authorize Path

Accounts_OAuth_Wordpress_authorize_path

Wordpress Authorize Path

OAuth > WordPress > WordPress Callback URL

Accounts_OAuth_Wordpress_callback_url

WordPress Callback URL

OAuth > WordPress > WordPress Id

Accounts_OAuth_Wordpress_id

WordPress Id

OAuth > WordPress > Identity Path

Accounts_OAuth_Wordpress_identity_path

Identity Path

OAuth > WordPress >Identity Token Sent Via

Accounts_OAuth_Wordpress_identity_token_sent_via

Identity Token Sent

OAuth > WordPress > WordPress Secret

Accounts_OAuth_Wordpress_secret

WordPress Secret

OAuth > WordPress > Scope

Accounts_OAuth_Wordpress_scope

Wordpress scope

Layout > Login > Show Default Login Form

Accounts_ShowFormLogin

Show Default Login Form.

Outlook calendar

Outlook_calendar

Outlook calendar

Accounts > Iframe > Enabled

Accounts_iframe_enabled

Enable Iframe

Accounts > Iframe > Iframe URL

Accounts_iframe_url

Iframe URL

Email > Privacy > Add Sender to Reply-To

Add_Sender_To_ReplyTo

Add Sender to Reply-To

General > Allow Invalid Self-Signed Certs

Allow_Invalid_SelfSigned_Certs

Allow Invalid Self-Signed Certs

Setup Wizard > Organization Info > Allow Marketing Emails

Allow_Marketing_Emails

Allow Marketing Emails

Mobile > Allow Save Media to Gallery

Allow_Save_Media_to_Gallery

Allow Save Media to Gallery

Analytics

Analytics

Analytics

Analytics > Features Enabled > Analytics_Messages

Analytics_features_messages

Tracks custom events related to actions a user does on messages

Analytics > Features Enabled > Analytics_Rooms

Analytics_features_rooms

Tracks custom events related to actions on a channel or group (create, leave, delete).

Analytics > Features Enabled > Analytics_Users

Analytics_features_users

Tracks custom events related to actions related to users (password reset times, profile picture change, etc).

General > Apps > Directory for storing apps source package

Apps_Framework_Source_Package_Storage_FileSystem_Path

Directory for storing apps source package

General > Apps > Apps' Source Package Storage type

Last updated

Rocket.Chat versions receive support for six months after release.