Rocket Chat Permissions Management Guide

Permissions are essential for maintaining the security and integrity of your workspace, ensuring that users have appropriate access to specific functionalities and resources. Rocket.Chat offers a robust permission-based framework to manage access across various workspace features.

Permissions are assigned to roles, and users with those roles gain the corresponding access. Workspace administrators and users with the necessary permissions can modify both roles and their associated permissions as needed. To learn about managing roles, see Roles in Rocket.Chat.

To access the workspace Permissions, go to Manage → Workspace → Permissions. By default, administrators have all permissions, and other roles have specific permissions selected. You can select and deselect permissions under a role, allowing you to manage the actions that users with a specific role can perform.

If you want custom control over the assigned permissions, create custom roles and select the required permissions for the custom roles. You can then assign the roles to users, and they will gain access to the respective features.

For granular control over workspace settings, refer to the Permissions for Settings document.

Permission updates take effect instantly without requiring users to log out, sign in again, or refresh the system.

List of permissions

The permissions you can assign to a role on your workspace include the following:

You can also use REST API endpoints to view and update permissions. Refer to the Permissions API for details.

Name	Codebase Name	Purpose
Manage ABAC configuration	`abac-management`	Permission to manage Attribute-Based Access Control (ABAC) configuration.
Access Federation	`access-federation`	Permission to access federation features, create and join federated rooms.
Access Mailer Screen	`access-mailer`	Permission to use the Mailer Tool.
Access marketplace	`access-marketplace`	Permission to access the Rocket.Chat app Marketplace.
Access Permissions Screen	`access-permissions`	Permission to create and edit roles and permissions.
Modify Setting-Based Permissions	`access-setting-permissions`	Permission to access and configure per-setting permissions.
Add all users to a room	`add-all-to-room`	Permission to add all users to a room.
Add Omnichannel Agents to Departments	`add-livechat-department-agents`	Permission to assign an omnichannel agent to a department.
Add OAuth Service	`add-oauth-service`	Permission to manage different OAuth services and apps.
Move room within team	`move-room-to-team`	Permission to add an existing room to a team.
Add Team Member	`add-team-member`	Permission to add members to a team.
Add User to Any Public Channel	`add-user-to-any-c-room`	Permission to add a user to a public channel.
Add User to Any Private Channel	`add-user-to-any-p-room`	Permission to add a user to a private channel.
Add User to Any Joined Channel	`add-user-to-joined-room`	Permission to add a user to a joined channel.
Bypass rate limit for REST API	`api-bypass-rate-limit`	Permission to call API without rate limitation. See Rate Limiter.
Archive Room	`archive-room`	Permission to archive a channel.
Assign Admin Role	`assign-admin-role`	Permission to assign a user to the admin role. Requires `view-user-administration` permission.
Assign Roles	`assign-roles`	Permission to assign roles for a user. Requires `view-user-administration` permission.
Auto Translate	`auto-translate`	Permission to use the Auto Translate Tool.
Ban User	`ban-user`	Permission to ban a user.
Block IP Device Management	`block-ip-device-management`	Permission to block IP addresses through the device management panel.
Block Omnichannel contact channel	`block-livechat-contact`	Permission to block an Omnichannel contact from starting conversations.
Bulk Create Users	`bulk-register-user`	Permission to bulk add users.
Bypass time limit	`bypass-time-limit-edit-and-delete`	Permission to edit or delete messages after the configured time limit has expired.
Call Management	`call-management`	Permission to start a meeting. Requires Video Conference → BigBlueButton enabled. Accessible from More → BBB Video Chat → Start Meeting.
Change Livechat Room Visitors	`change-livechat-room-visitor`	Permission to change the visitor assigned to an Omnichannel room.
Clean Channel History	`clean-channel-history`	Permission to prune a channel's messages and/or files.
Clear OEmbed cache	`clear-oembed-cache`	Permission to clear the oEmbed URL preview cache.
Close Omnichannel Room	`close-livechat-room`	Permission to close your own Livechat channels.
Close Other Omnichannel Room	`close-others-livechat-room`	Permission to close other Livechat channels.
Convert Team	`convert-team`	Permission to convert team to channel.
Create Public Channels	`create-c`	Permission to create public channels.
Create Direct Messages	`create-d`	Permission to start direct messages.
Create Invite Links	`create-invite-links`	Permission to create invite links to add members to a room
Create Omnichannel contacts	`create-livechat-contact`	Permission to create Omnichannel contacts.
Create Private Channels	`create-p`	Permission to create private groups.
Create Personal Access Tokens	`create-personal-access-tokens`	Permission to create Personal Access Tokens. Accessible from My Account -> Personal Access Tokens.
Create User	`create-user`	Permission to create new users. Accessible from Manage → Users. Click New user on the top right-hand corner of the Users page to create a new user.
Create Team	`create-team`	Permission to create a team.
Create group within team	`create-team-group`	Permission to create private channels in a Team.
Create channel within team	`create-team-channel`	Permission to create public channels in a Team.
Delete Public Channels	`delete-c`	Permission to delete public channels.
Delete Direct Messages	`delete-d`	Permission to delete direct messages.
Delete Message	`delete-message`	Permission to delete a message within a channel.
Delete Own Message	`delete-own-message`	Permission to delete your own message.
Delete Private Channels	`delete-p`	Permission to delete private channels.
Delete group within Team	`delete-team-group`	Permission to delete private channels in a Team
Delete channel within Team	`delete-team-channel`	Permission to delete public channels in a Team
Edit Livechat Room Custom Fields	`edit-livechat-room-customfields`	Permission to edit a livechat custom field.
Delete User	`delete-user`	Permission to delete users.
Delete Team	`delete-team`	Permission to delete a team
Edit Message	`edit-message`	Permission to edit a message.
Edit Omnichannel Contact	`edit-omnichannel-contact`	Permission to edit omnichannel contact.
Edit Other User Active Status	`edit-other-user-active-status`	Permission to enable or disable other accounts. Accessible from Manage → Users.
Edit Other User Avatar	`edit-other-user-avatar`	Permission to edit other users avatar.
Edit Other User E2E Encryption	`edit-other-user-e2ee`	Permission to edit other users E2E key.
Edit Other User Information	`edit-other-user-info`	Permission to change other user's name, username, or email address. Accessible from Manage → Users.
Edit Other User Password	`edit-other-user-password`	Permission to modify other user's passwords. Requires edit-other-user-info permission. Accessible from Manage → Users.
Edit Other User Two Factor TOTP	`edit-other-user-totp`	Permission to edit other user TOTP.
Edit Privileged Setting	`edit-privileged-setting`	Permission to edit privileged settings.
Edit Room	`edit-room`	Permission to edit a room's name, topic, type (private or public status), and status (active or archived).
Edit Room Avatar	`edit-room-avatar`	Permission to edit a room avatar.
Edit Room's Retention Policy	`edit-room-retention-policy`	Permission to edit a room's retention policy.
Edit Team	`edit-team`	Permission to edit a team.
Edit Team Channel	`edit-team-channel`	Permission to add a team channel
Edit Team Member	`edit-team-member`	Permission to add a team member.
Export messages as PDF	`export-messages-as-pdf`	Permission to export room messages as a PDF document.
Force Delete Message	`force-delete-message`	Permission to forcefully delete messages, independent of any deletion blocking setting.
Get Server Info	`get-server-info`	Permission to retrieve server version and configuration information through the API.
Join Without Join Code	`join-without-join-code`	Permission to bypass join codes when entering a channel with a join code set.
Kick User from Any Public Channel	`kick-user-from-any-c-room`	Permission to remove any user from any public channel.
Kick User from Any Private Channel	`kick-user-from-any-p-room`	Permission to remove any user from any private channel.
Leave Channels	`leave-c`	Permission to leave the public channel.
Leave Private Groups	`leave-p`	Permission to leave the private channel.
Logout Device Management	`logout-device-management`	Permission to log out device.
Logout Other User	`logout-other-user`	Permission to log out other users.
Mail Messages	`mail-messages`	Permission to use the "Mail Messages" tool in the channel actions menu.
Manage ABAC room attributes	`manage-abac-room-attributes`	Permission to manage ABAC attributes on rooms.
Manage ABAC rooms	`manage-abac-rooms`	Permission to manage ABAC-protected rooms.
Manage ABAC settings	`manage-abac-settings`	Permission to manage ABAC settings.
Manage Apps	`manage-apps`	Permission to manage all apps. Accessible from Marketplace.
Manage Assets	`manage-assets`	Permission to manage assets. Must also be admin. Accessible from Manage → Assets.
Manage Email Inbox	`manage-email-inbox`	Permission to manage email inbox.
Manage Cloud	`manage-cloud`	Permission to manage cloud. Requires view-user-administration permission. Accessible from Manage → Subscription.
Manage Emoji	`manage-emoji`	Permission to add custom emojis to the server. Accessible from Manage → Custom Emoji.
Manage Incoming Integrations	`manage-incoming-integrations`	Permission to manage all incoming integrations. Accessible from Manage → Integrations.
Manage Outgoing Integrations	`manage-outgoing-integrations`	Permission to manage all outgoing integrations. Accessible from Manage → Integrations.
Manage OAuth Apps	`manage-oauth-apps`	Permission to manage OAuth apps. Accessible from Manage → Workspace → Settings → OAuth.
Manage Own Outgoing Integrations	`manage-own-outgoing-integrations`	User can create and edit own outgoing integration - webhooks.
Manage Own Incoming Integrations	`manage-own-incoming-integrations`	User can create and edit own incoming integration - webhooks.
Manage Omnichannel Agents	`manage-livechat-agents`	Permission to manage omnichannel agents.
Manage Omnichannel Canned Responses	`manage-livechat-canned-responses`	Permission to manage canned responses.
Manage Omnichannel Departments	`manage-livechat-departments`	Permission to manage omnichannel departments.
Manage Omnichannel Managers	`manage-livechat-managers`	Permission to manage omnichannel managers.
Manage Omnichannel Monitors	`manage-livechat-monitors`	Permission to manage omnichannel monitors.
Manage Omnichannel Priorities	`manage-livechat-priorities`	Permission to manage omnichannel priorities.
Manage Omnichannel SLA	`manage-livechat-sla`	Permission to manage omnichannel SLA
Manage Omnichannel Tags	`manage-livechat-tags`	Permission to manage omnichannel tags.
Manage Omnichannel Units	`manage-livechat-units`	Permission to manage omnichannel units.
Manage Moderation Actions	`manage-moderation-actions`	Permission to manage moderation.
Change Some Settings	`manage-selected-settings`	Permission to change settings which are explicitly granted to be changed.
Manage Sounds	`manage-sounds`	Permission to manage sounds. Accessible from Manage → Custom Sounds.
Manage User Status	`manage-user-status`	Permission to manage user status.
Mention All	`mention-all`	Permission to mention everyone in a channel.
Mention Here	`mention-here`	Permission to notify active users in a channel.
Impersonate Other Users	`message-impersonate`	Permission to impersonate other users using message alias. Accessible from Manage → Permissions.
Mute User	`mute-user`	Permission to mute other users in the same channel.
On Hold Omnichannel Room	`on-hold-livechat-room`	Permission to put a room on hold.
On Hold Others Omnichannel Room	`on-hold-others-livechat-room`	Permission to put livechat room on hold for others.
Can assign any agent to receive outbound	`outbound.can-assign-any-agent`	Permission to assign any available agent to outbound campaign contacts.
Can assign departments to receive outbound	`outbound.can-assign-queues`	Permission to assign department queues in outbound campaigns.
Can assign self only to receive outbound	`outbound.can-assign-self-only`	Permission to assign only yourself to outbound campaign contacts.
Send outbound messages	`outbound.send-messages`	Permission to send messages in outbound campaign conversations.
Pin Message	`pin-message`	Permission to pin a message in a channel.
Post ReadOnly	`post-readonly`	Permission to post messages on read-only channels.
Preview Public Channel	`preview-c-room`	Permission to preview messages in public channels without joining the room.
Register On Cloud	`register-on-cloud`	Permission to register a workspace manually.
Remove Canned Responses	`remove-canned-responses`	Permission to remove canned responses.
Remove Closed Omnichannel Room	`remove-closed-livechat-room`	Permission to remove a single closed Omnichannel conversation.
Remove Closed Omnichannel Room	`remove-closed-livechat-rooms`	Permission to close Live Chat rooms. Requires `view-livechat-rooms` permission. Accessible from Live Chat → Current Chats.
Remove Omnichannel Departments	`remove-livechat-department`	Permission to remove omnichannel departments.
Remove Slackbridge Links	`remove-slackbridge-links`	Permission to remove slackbridge links
Remove Team Channel	`remove-team-channel`	Permission to remove a channel from a team.
Remove User	`remove-user`	Permission to remove users from channels.
Request PDF Transcript	`request-pdf-transcript`	Permission to request a PDF transcript for a chat.
Restart the server	`restart-server`	Permission to reset the server.
Run Import	`run-import`	Permission to use the data importer tools. Must also be an admin. Accessible from Manage → Import.
Run Migration	`run-migration`	Permission to run migrations.
Save All Canned Responses	`save-all-canned-responses`	Permission to save all canned responses.
Save Canned Responses	`save-canned-responses`	Permission to save canned responses.
Save Department Canned Responses	`save-department-canned-responses`	Permission to save canned responses in the right.
Save Others Omnichannel Room Info	`save-others-livechat-room-info`	Permission to add additional information to both the visitor and Live Chat rooms.
Send Emails	`send-mail`	Permission to send email messages through the server mailer.
Send Many Messages	`send-many-messages`	Permission to bypasses rate limit of 5 messages per second.
Send Omnichannel Conversation Transcript	`send-omnichannel-chat-transcript`	Permission to send omnichannel transcript.
Set Leader	`set-leader`	Permission to set leaders for channels
Set Moderator	`set-moderator`	Permission to set moderators for channels.
Set Owner	`set-owner`	Permission to set other users as owner of a public channel.
Set React When ReadOnly	`set-react-when-readonly`	Permission to react to messages in only channels.
Set ReadOnly	`set-readonly`	Permission to set room read-only. Accessible from Room Info -> Edit.
Start Discussion	`start-discussion`	Permission to start a discussion.
Start Discussion (Other-User)	`start-discussion-other-user`	Permission to start a discussion, which permits the user to create a discussion from a message sent by another user as well.
Sync authentication services' users	`sync-auth-services-users`	Permission to sync users from other authentication services to the workspace.
Test options on admin panel	`test-admin-options`	Permission to test and validate admin configuration options, such as the LDAP connection test.
Test push notifications	`test-push-notifications`	Permission to send test push notifications to devices.
Toggle Room E2E Encryption	`toggle-room-e2e-encryption`	Permission to toggle E2E encryption.
Transfer Livechat Guests	`transfer-livechat-guest`	Permission to transfer an Omnichannel visitor to another agent or department.
Unarchive Room	`unarchive-room`	Permission to unarchive channels.
Unblock Omnichannel contact channel	`unblock-livechat-contact`	Permission to unblock a previously blocked Omnichannel contact.
Update Omnichannel contacts	`update-livechat-contact`	Permission to update existing Omnichannel contact records.
User Generate Access Token	`user-generate-access-token`	Permission to create authorization tokens for users.
Ring other users when calling	`videoconf-ring-users`	Permission to ring other users when calling.
View ABAC audit log	`view-abac-audit-log`	Permission to view the ABAC audit log.
View Agent Canned Responses	`view-agent-canned-responses`	Permission to view canned responses of an agent.
View All Canned Responses	`view-all-canned-responses`	Permission to view all canned responses
View All Team Channels	`view-all-team-channels`	Permission to view all team's channels
View All Teams	`view-all-teams`	Permission to view all teams
View Members List in Broadcast Room	`view-broadcast-member-list`	Permission to view the list of users in a broadcast channel.
View Public Channel	`view-c-room`	Permission to view public channels.
View Canned Responses	`view-canned-response`	Permission to view available Omnichannel canned responses.
View Direct Messages	`view-d-room`	Permission to view direct messages. Does not affect the ability to begin/start a direct message with another user.
View Device Management	`view-device-management`	Permission to view device management dashboard
View Engagement Dashboard	`view-engagement-dashboard`	Permission to view engagement dashboard.
View Federation Data	`view-federation-data`	Permission to view federation data
View Full Other User Info	`view-full-other-user-info`	Permission to view full profile of other users including account creation date, last login, etc.
View Import Operations	`view-import-operations`	Permission to view import operations
View Join Code	`view-join-code`	Permission to view the join code of channels.
View Joined Room	`view-joined-room`	Permission to view current joined channels.
View Omnichannel Rooms	`view-l-room`	Permission to view Omnichannel rooms. It’s typically assigned to agents.
View Omnichannel Analytics	`view-livechat-analytics`	Permission to view Live Chat analytics. Requires Live Chat feature enabled and `view-Livehat-manager` permission.
View Omnichannel Appearance	`view-livechat-appearance`	Permission to view live chat appearance.
View Omnichannel Business-Hours	`view-livechat-business-hours`	Permission to view live chat business hours.
View Omnichannel contacts	`view-livechat-contact`	Permission to view Omnichannel contact details.
View Omnichannel contacts history	`view-livechat-contact-history`	Permission to view the conversation history of an Omnichannel contact.
View Omnichannel Custom Fields	`view-livechat-customfields`	Permission to view Omnichannel custom fields.
View Omnichannel Departments	`view-livechat-departments`	Permission to view Omnichannel departments.
View Omnichannel Installation	`view-livechat-installation`	Permission to view Omnichannel installation
View Omnichannel Manager	`view-livechat-manager`	Permission to view other Live Chat managers.
View Omnichannel Queue	`view-livechat-queue`	Permission to view Omnichannel queue
View Omnichannel Real-time Monitoring	`view-livechat-real-time-monitoring`	Permission to view livechat real-time monitoring.
View Omnichannel Reports	`view-livechat-reports`	Permission to view Omnichannel summary reports.
View Omnichannel Rooms closed by another agent	`view-livechat-room-closed-by-another-agent`	Permission to view live chat rooms closed by another agent.
View Omnichannel Rooms closed by another agent in the same department	`view-livechat-room-closed-same-department`	Permission to view live chat rooms closed by another agent in the same department.
View Omnichannel Room Custom Fields	`view-livechat-room-customfields`	Permission to view custom field values on Omnichannel rooms.
View all omnichannel rooms	`view-livechat-rooms`	Permission to view all other Omnichannel rooms. It’s usually assigned to managers and workspace admins.
View Omnichannel Triggers	`view-livechat-triggers`	Permission to view live chat triggers.
View Omnichannel Webhooks	`view-livechat-webhooks`	Permission to view live chat webhooks
View Logs	`view-logs`	Permission to view logs. Accessible from Manage → Workspace → Reports → Logs.
Can view members in all rooms	`view-members-list-all-rooms`	Permission to view the member list in any room.
View Moderation Console	`view-moderation-console`	Permission to view the moderation console of the server.
View Omnichannel Contact Center	`view-omnichannel-contact-center`	Permission to manage access to the contact center.
View Other User Channels	`view-other-user-channels`	Permission to manage channels on the admin screen.
View Outside Room	`view-outside-room`	Permission to find new channels and users. Users without this permission won't see channels that they are not part of when searching using the spotlight.
View Private Room	`view-p-room`	Permission to view private channels.
View Privileged Setting	`view-privileged-setting`	Permission to view privileged settings.
View Room Administration	`view-room-administration`	Enables Manage → Workspace → Rooms module. Enables Permission to view public, private, and direct message statistics. Does not include permission to view conversations or archives.
View Statistics	`view-statistics`	Enables Manage → Workspace module. Enables the permission to view system statistics such as number of users logged in, number of rooms, operating system information.
View User Administration	`view-user-administration`	Enables Manage → Users module. Only includes partial, read-only list view of other user accounts currently logged into the system. No user account information is accessible with this permission. Add view-full-other-user-info to see a complete list of other users via the Manage → Users.
Can Audit	`can-audit`	Permission to access the Message Auditing Panel
Can Audit Log	`can-audit-log`	Permission to check the details about who used the Message Auditing Panel and their search results
Allow file upload on mobile devices	`mobile-upload-file`	Permission to allow mobile users to upload files to the workspace.
Delete Omnichannel Contact	`delete-livechat-contact`	Permission to delete an Omnichannel contact.
Allow Internal Voice Calls	`allow-internal-voice-calls`	Essential for standard WebRTC calls and allows workspace members to make voice calls to one another.
Allow External Voice Calls	`allow-external-voice-calls`	Allows users to place and receive calls through the SIP provider, including PSTN calls. This works only when SIP integration is fully configured.

By carefully managing permissions, administrators can provide a safe space for collaboration. As we move on to the next section, we'll discuss managing permissions for workspace settings.

Permissions in Rocket.Chat

Access Permissions menu

List of permissions

Documentation Index

Permissions in Rocket.Chat

Access Permissions menu

List of permissions