Discord Role Audit
free, no account and nothing to install.
paste your roles and i’ll show you which ones have Administrator, which can ban, kick or delete channels and what each one can actually do.
name first, permission integer last. decimal or hex, commas, colons and tabs all work.
paste a role list and every role shows up here, worst first, with the permissions that put it there.
The 12 permissions the audit flags
eleven are the ones Discord locks behind server-wide two-factor authentication. the twelfth reaches every member at once.
| Permission | Verdict | API flag | Bit | Decimal | What it lets someone do |
|---|---|---|---|---|---|
| Administrator | Critical | ADMINISTRATOR | 1 << 3 | 8 | Every permission + bypasses all channel overwrites |
| Manage Channels | High | MANAGE_CHANNELS | 1 << 4 | 16 | Create, edit and delete channels |
| Manage Roles | High | MANAGE_ROLES | 1 << 28 | 268435456 | Create, edit and delete roles below their own |
| Manage Expressions | High | MANAGE_GUILD_EXPRESSIONS | 1 << 30 | 1073741824 | Edit and delete emoji, stickers and soundboard sounds |
| Manage Webhooks | High | MANAGE_WEBHOOKS | 1 << 29 | 536870912 | Create, edit and delete webhooks |
| Manage Server | High | MANAGE_GUILD | 1 << 5 | 32 | Edit server name, region and other settings |
| View Monetization Analytics | High | VIEW_CREATOR_MONETIZATION_ANALYTICS | 1 << 41 | 2199023255552 | View role-subscription insights |
| Kick Members | High | KICK_MEMBERS | 1 << 1 | 2 | Remove members from the server |
| Ban Members | High | BAN_MEMBERS | 1 << 2 | 4 | Ban members from the server |
| Manage Messages | High | MANAGE_MESSAGES | 1 << 13 | 8192 | Delete other users’ messages |
| Manage Threads | High | MANAGE_THREADS | 1 << 34 | 17179869184 | Delete, archive and manage threads |
| Mention @everyone, @here & Roles | Elevated | MENTION_EVERYONE | 1 << 17 | 131072 | Ping @everyone, @here and all roles |
How the audit works
How to use it
- get your roles with their permission integers, either as the JSON from GET /guilds/{guild.id}/roles or as one role per line with the number last.
- paste them in. the audit runs as you type and nothing gets sent anywhere.
- read the ranked list. a role’s verdict is its worst single permission, so the roles that can actually hurt you are at the top.
- use Who holds what for the thing Discord makes you click through every role to find out: who can ban, who can delete channels, who can ping everyone.
What the tiers mean
none of this is my opinion. Critical is Administrator, which gives every permission and skips all channel overwrites. High is the set Discord itself locks behind server-wide two-factor authentication, which is Discord’s own idea of a moderation permission. Elevated is Mention Everyone, the one other flag that reaches every member at once. everything else is Low.
bits above 31 go through BigInt, so the newest permissions, from Set Voice Channel Status at 1 << 48 to Bypass Slowmode at 1 << 52, decode exactly. if a bit isn’t assigned in the Discord API docs, i tell you about it and then leave it out of the verdict.
Questions
Where do I get a role list to paste?
Any bot or dashboard that can read your server prints role names with their permission integers. If you use the Discord API yourself, GET /guilds/{guild.id}/roles gives you the whole list as JSON, and you can paste that straight in. One role per line, name first and number last, works too.
What makes a permission dangerous?
I flag the eleven permissions Discord itself locks behind server-wide two-factor authentication, plus Mention Everyone. Administrator counts on its own: it gives every permission and ignores channel overwrites, so no other setting can take it back.
Why is a role with fifty permissions ranked below one with three?
A role’s verdict is the worst single permission it has, not the total. Fifty harmless flags are still harmless. Three that include Ban Members are not.
Does this show the permissions someone actually has?
It shows what each role gives at server level. A member gets everything from all their roles combined, and channel overwrites can add or take away permissions per channel, except Administrator, which ignores them.
Is my server data uploaded anywhere?
No. The permission table and all the maths are in this page. Nothing you paste leaves your browser, and there’s no bot to invite and no login.