Kubestro » Server

Granting capabilities one at a time does not scale, and an administrator should not have to remember which twelve permissions make up "someone who runs servers but touches nothing else". A role is a named, reusable set of permissions that can be given to a user or a group.

A role can name individual permissions or whole families of them ("everything the Minecraft module offers"). A role is marked for platform-wide use, for use on a single object, or for both, and cannot be given in the wrong place. A fresh install already has an all-permissions Administrator role that cannot be altered or removed.