GlobalGroups
A review of extra permissions assigned to global groups on Wikimedia Foundation wikis.
Table of contents
- Abusefilter-helper
- Abusefilter-maintainer
- Apihighlimits-requestor
- Captcha-exempt
- Founder
- Global-bot
- Global-deleter
- Global-flow-create
- Global-interface-editor
- Global-ipblock-exempt
- Global-rollbacker
- Global-sysop
- New-wikis-importer
- Oathauth-tester
- Ombuds
- Recursive-export
- Staff
- Steward
- Sysadmin
- Vrt-permissions
- Wmf-ops-monitoring
- Wmf-researcher
Sort by name, number of permissions, number of members.
Abusefilter-helper
23 accounts on all wikis have these permissions:
| abusefilter-log | View the abuse log |
| abusefilter-log-detail | View detailed abuse log entries |
| abusefilter-log-private | View log entries of abuse filters marked as private |
| abusefilter-view | View abuse filters |
| abusefilter-view-private | View abuse filters marked as private |
| spamblacklistlog | View the spam blacklist log |
Abusefilter-maintainer
3 accounts on all wikis have these permissions:
| abusefilter-log | View the abuse log |
| abusefilter-log-detail | View detailed abuse log entries |
| abusefilter-log-private | View log entries of abuse filters marked as private |
| abusefilter-modify | Create or modify abuse filters |
| abusefilter-modify-global | Create or modify global abuse filters |
| abusefilter-modify-restricted | Modify abuse filters with restricted actions |
| abusefilter-view | View abuse filters |
| abusefilter-view-private | View abuse filters marked as private |
| oathauth-enable | Enable two-factor authentication |
Apihighlimits-requestor
8 accounts on all wikis have these permissions:
| apihighlimits | Use higher limits in API queries |
Captcha-exempt
7 accounts on all wikis have these permissions:
| skipcaptcha | Perform CAPTCHA-triggering actions without having to go through the CAPTCHA |
Founder
1 account on all wikis has these permissions:
| abusefilter-log | View the abuse log |
| abusefilter-log-detail | View detailed abuse log entries |
| abusefilter-log-private | View log entries of abuse filters marked as private |
| abusefilter-view | View abuse filters |
| abusefilter-view-private | View abuse filters marked as private |
| apihighlimits | Use higher limits in API queries |
| autopatrol | Have one's own edits automatically marked as patrolled |
| browsearchive | Search deleted pages |
| centralauth-merge | Merge their account |
| createaccount | Create new user accounts |
| deletedhistory | View deleted history entries, without their associated text |
| deletedtext | View deleted text and changes between deleted revisions |
| edit | Edit pages |
| globalblock-exempt | Bypass global blocks |
| import | Import pages from other wikis |
| importupload | Import pages from a file upload |
| ipblock-exempt | Bypass IP blocks, auto-blocks and range blocks |
| minoredit | Mark edits as minor |
| move | Move pages |
| mwoauthviewprivate | View private OAuth data |
| noratelimit | Not be affected by rate limits |
| oathauth-enable | Enable two-factor authentication |
| purge | Purge the cache for a page |
| read | Read pages |
| rollback | Quickly rollback the edits of the last user who edited a particular page |
| sendemail | Send email to other users |
| spamblacklistlog | View the spam blacklist log |
| suppressredirect | Not create redirects from source pages when moving pages |
| titleblacklistlog | View title blacklist log |
| torunblocked | Bypass automatic blocks of Tor exit nodes |
| unwatchedpages | View a list of unwatched pages |
| upload | Upload files |
| viewdeletedfile | View files and pages in the "File" and "File talk" namespaces that are deleted |
| viewmyprivateinfo | View your own private data (e.g. email address, real name) |
| viewmywatchlist | View your own watchlist |
Global-bot
10 accounts on 556 wikis have these permissions:
| apihighlimits | Use higher limits in API queries |
| autoconfirmed | Not be affected by IP-based rate limits |
| autopatrol | Have one's own edits automatically marked as patrolled |
| autoreview | Have one's own edits automatically marked as "checked" |
| bot | Be treated as an automated process |
| editsemiprotected | Edit pages protected as "Allow only autoconfirmed users" |
| nominornewtalk | Not have minor edits to discussion pages trigger the new messages prompt |
| noratelimit | Not be affected by rate limits |
| skipcaptcha | Perform CAPTCHA-triggering actions without having to go through the CAPTCHA |
| suppressredirect | Not create redirects from source pages when moving pages |
| writeapi | Use of the write API |
Global-deleter
1 account on all wikis has these permissions:
| browsearchive | Search deleted pages |
| delete | Delete pages |
| deletedhistory | View deleted history entries, without their associated text |
| deletedtext | View deleted text and changes between deleted revisions |
| undelete | Undelete a page |
Global-flow-create
3 accounts on all wikis have these permissions:
| autopatrol | Have one's own edits automatically marked as patrolled |
| flow-create-board | Create Structured Discussions boards in any location |
| move | Move pages |
| move-rootuserpages | Move root user pages |
| move-subpages | Move pages with their subpages |
Global-interface-editor
23 accounts on all wikis have these permissions:
| autoconfirmed | Not be affected by IP-based rate limits |
| edit | Edit pages |
| editcontentmodel | Edit the content model of a page |
| editeditorprotected | Edit pages protected as "Allow only editors" |
| editextendedsemiprotected | Edit pages protected as "Allow only autopatrollers" |
| editinterface | Edit the user interface |
| editprotected | Edit pages protected as "Allow only administrators" |
| editsemiprotected | Edit pages protected as "Allow only autoconfirmed users" |
| editsitecss | Edit sitewide CSS |
| editsitejs | Edit sitewide JavaScript |
| editsitejson | Edit sitewide JSON |
| editusercss | Edit other users' CSS files |
| edituserjs | Edit other users' JavaScript files |
| extendedconfirmed | Edit restricted pages |
| oathauth-enable | Enable two-factor authentication |
| protect | Change protection levels and edit cascade-protected pages |
| suppressredirect | Not create redirects from source pages when moving pages |
| tboverride | Override the title or username blacklist |
| templateeditor | Edit protected templates |
Global-ipblock-exempt
1648 accounts on all wikis have these permissions:
| globalblock-exempt | Bypass global blocks |
| torunblocked | Bypass automatic blocks of Tor exit nodes |
Global-rollbacker
109 accounts on all wikis have these permissions:
| abusefilter-log-detail | View detailed abuse log entries |
| autoconfirmed | Not be affected by IP-based rate limits |
| autopatrol | Have one's own edits automatically marked as patrolled |
| autoreviewrestore | Auto-review on rollback |
| editsemiprotected | Edit pages protected as "Allow only autoconfirmed users" |
| markbotedits | Mark rolled-back edits as bot edits |
| move | Move pages |
| movestable | Move pages with stable versions |
| noratelimit | Not be affected by rate limits |
| patrolmarks | View recent changes patrol marks |
| rollback | Quickly rollback the edits of the last user who edited a particular page |
| skipcaptcha | Perform CAPTCHA-triggering actions without having to go through the CAPTCHA |
| suppressredirect | Not create redirects from source pages when moving pages |
Global-sysop
24 accounts on all except 94 wikis have these permissions:
| abusefilter-log-detail | View detailed abuse log entries |
| abusefilter-modify | Create or modify abuse filters |
| apihighlimits | Use higher limits in API queries |
| autoconfirmed | Not be affected by IP-based rate limits |
| autopatrol | Have one's own edits automatically marked as patrolled |
| autoreviewrestore | Auto-review on rollback |
| block | Block other users from editing |
| blockemail | Block a user from sending email |
| browsearchive | Search deleted pages |
| delete | Delete pages |
| deletedhistory | View deleted history entries, without their associated text |
| deletedtext | View deleted text and changes between deleted revisions |
| deletelogentry | Delete and undelete specific log entries |
| deleterevision | Delete and undelete specific revisions of pages |
| editcontentmodel | Edit the content model of a page |
| editinterface | Edit the user interface |
| editprotected | Edit pages protected as "Allow only administrators" |
| editsemiprotected | Edit pages protected as "Allow only autoconfirmed users" |
| editsitecss | Edit sitewide CSS |
| editsitejs | Edit sitewide JavaScript |
| editsitejson | Edit sitewide JSON |
| editusercss | Edit other users' CSS files |
| edituserjs | Edit other users' JavaScript files |
| edituserjson | Edit other users' JSON files |
| flow-delete | Delete Structured Discussions topics and posts |
| flow-edit-post | Edit Structured Discussions posts by other users |
| flow-hide | Hide Structured Discussions topics and posts |
| import | Import pages from other wikis |
| ipblock-exempt | Bypass IP blocks, auto-blocks and range blocks |
| markbotedits | Mark rolled-back edits as bot edits |
| mergehistory | Merge the history of pages |
| move | Move pages |
| move-categorypages | Move category pages |
| move-rootuserpages | Move root user pages |
| move-subpages | Move pages with their subpages |
| movefile | Move files |
| movestable | Move pages with stable versions |
| noratelimit | Not be affected by rate limits |
| nuke | Mass delete pages |
| oathauth-enable | Enable two-factor authentication |
| override-antispoof | Override the spoofing checks |
| patrol | Mark others' edits as patrolled |
| protect | Change protection levels and edit cascade-protected pages |
| reupload | Overwrite existing files |
| reupload-own | Overwrite existing files uploaded by oneself |
| reupload-shared | Override files on the shared media repository locally |
| rollback | Quickly rollback the edits of the last user who edited a particular page |
| skipcaptcha | Perform CAPTCHA-triggering actions without having to go through the CAPTCHA |
| spamblacklistlog | View the spam blacklist log |
| suppressredirect | Not create redirects from source pages when moving pages |
| tboverride | Override the title or username blacklist |
| templateeditor | Edit protected templates |
| titleblacklistlog | View title blacklist log |
| undelete | Undelete a page |
| unwatchedpages | View a list of unwatched pages |
| upload | Upload files |
New-wikis-importer
3 accounts on all except 783 wikis have these permissions:
| autoconfirmed | Not be affected by IP-based rate limits |
| delete | Delete pages |
| deletedhistory | View deleted history entries, without their associated text |
| deletedtext | View deleted text and changes between deleted revisions |
| editinterface | Edit the user interface |
| editprotected | Edit pages protected as "Allow only administrators" |
| editsemiprotected | Edit pages protected as "Allow only autoconfirmed users" |
| editsitecss | Edit sitewide CSS |
| editsitejs | Edit sitewide JavaScript |
| editsitejson | Edit sitewide JSON |
| import | Import pages from other wikis |
| importupload | Import pages from a file upload |
| move | Move pages |
| move-subpages | Move pages with their subpages |
| noratelimit | Not be affected by rate limits |
| oathauth-enable | Enable two-factor authentication |
| protect | Change protection levels and edit cascade-protected pages |
| skipcaptcha | Perform CAPTCHA-triggering actions without having to go through the CAPTCHA |
| suppressredirect | Not create redirects from source pages when moving pages |
| tboverride | Override the title or username blacklist |
| undelete | Undelete a page |
Oathauth-tester
801 accounts on all wikis have these permissions:
| oathauth-enable | Enable two-factor authentication |
Ombuds
12 accounts on all wikis have these permissions:
| abusefilter-hidden-log | View hidden abuse log entries |
| abusefilter-log | View the abuse log |
| abusefilter-log-detail | View detailed abuse log entries |
| abusefilter-log-private | View log entries of abuse filters marked as private |
| abusefilter-privatedetails | View private data in the abuse log |
| abusefilter-privatedetails-log | View the AbuseFilter private details access log |
| abusefilter-view | View abuse filters |
| abusefilter-view-private | View abuse filters marked as private |
| browsearchive | Search deleted pages |
| checkuser | Check user's IP addresses and other information |
| checkuser-log | View the checkuser log |
| deletedhistory | View deleted history entries, without their associated text |
| deletedtext | View deleted text and changes between deleted revisions |
| oathauth-enable | Enable two-factor authentication |
| suppressionlog | View private logs |
| viewsuppressed | View revisions hidden from any user |
Recursive-export
0 accounts on all wikis have these permissions:
| override-export-depth | Export pages including linked pages up to a depth of 5 |
Staff
34 accounts on all wikis have these permissions:
| abusefilter-hidden-log | View hidden abuse log entries |
| abusefilter-hide-log | Hide entries in the abuse log |
| abusefilter-log | View the abuse log |
| abusefilter-log-detail | View detailed abuse log entries |
| abusefilter-log-private | View log entries of abuse filters marked as private |
| abusefilter-modify | Create or modify abuse filters |
| abusefilter-modify-global | Create or modify global abuse filters |
| abusefilter-modify-restricted | Modify abuse filters with restricted actions |
| abusefilter-privatedetails | View private data in the abuse log |
| abusefilter-privatedetails-log | View the AbuseFilter private details access log |
| abusefilter-revert | Revert all changes by a given abuse filter |
| abusefilter-view | View abuse filters |
| abusefilter-view-private | View abuse filters marked as private |
| apihighlimits | Use higher limits in API queries |
| autoconfirmed | Not be affected by IP-based rate limits |
| autopatrol | Have one's own edits automatically marked as patrolled |
| bigdelete | Delete pages with large histories |
| block | Block other users from editing |
| blockemail | Block a user from sending email |
| browsearchive | Search deleted pages |
| centralauth-merge | Merge their account |
| centralauth-unmerge | Unmerge global account |
| centralnotice-admin | Manage central notices |
| checkuser | Check user's IP addresses and other information |
| checkuser-log | View the checkuser log |
| delete | Delete pages |
| deletedhistory | View deleted history entries, without their associated text |
| deletedtext | View deleted text and changes between deleted revisions |
| deletelogentry | Delete and undelete specific log entries |
| deleterevision | Delete and undelete specific revisions of pages |
| edit | Edit pages |
| editcontentmodel | Edit the content model of a page |
| editinterface | Edit the user interface |
| editprotected | Edit pages protected as "Allow only administrators" |
| editsemiprotected | Edit pages protected as "Allow only autoconfirmed users" |
| editsitecss | Edit sitewide CSS |
| editsitejs | Edit sitewide JavaScript |
| editsitejson | Edit sitewide JSON |
| editusercss | Edit other users' CSS files |
| edituserjs | Edit other users' JavaScript files |
| edituserjson | Edit other users' JSON files |
| extendedconfirmed | Edit restricted pages |
| flow-create-board | Create Structured Discussions boards in any location |
| flow-delete | Delete Structured Discussions topics and posts |
| flow-edit-post | Edit Structured Discussions posts by other users |
| flow-hide | Hide Structured Discussions topics and posts |
| flow-suppress | Suppress Structured Discussions revisions |
| gadgets-definition-edit | Edit gadget definitions |
| gadgets-edit | Edit gadget JavaScript and CSS pages |
| globalblock-exempt | Bypass global blocks |
| globalblock-whitelist | Disable global blocks locally |
| hideuser | Block a username, hiding it from the public |
| import | Import pages from other wikis |
| importupload | Import pages from a file upload |
| ipblock-exempt | Bypass IP blocks, auto-blocks and range blocks |
| move | Move pages |
| move-rootuserpages | Move root user pages |
| move-subpages | Move pages with their subpages |
| movefile | Move files |
| movestable | Move pages with stable versions |
| mwoauthmanageconsumer | Manage OAuth consumers |
| mwoauthmanagemygrants | Manage OAuth grants |
| mwoauthproposeconsumer | Propose new OAuth consumers |
| mwoauthsuppress | Suppress OAuth consumers |
| mwoauthupdateownconsumer | Update OAuth consumers you control |
| mwoauthviewprivate | View private OAuth data |
| mwoauthviewsuppressed | View suppressed OAuth consumers |
| noratelimit | Not be affected by rate limits |
| nuke | Mass delete pages |
| oathauth-disable-for-user | Disable two-factor authentication for a user |
| oathauth-enable | Enable two-factor authentication |
| override-antispoof | Override the spoofing checks |
| patrolmarks | View recent changes patrol marks |
| protect | Change protection levels and edit cascade-protected pages |
| purge | Purge the cache for a page |
| reupload | Overwrite existing files |
| reupload-shared | Override files on the shared media repository locally |
| review | Mark revisions as being "checked" |
| rollback | Quickly rollback the edits of the last user who edited a particular page |
| sendemail | Send email to other users |
| setmentor | Set user's mentor |
| skipcaptcha | Perform CAPTCHA-triggering actions without having to go through the CAPTCHA |
| stablesettings | Configure how the stable version is selected and displayed |
| suppressionlog | View private logs |
| suppressredirect | Not create redirects from source pages when moving pages |
| suppressrevision | View, hide and unhide specific revisions of pages from any user |
| tboverride | Override the title or username blacklist |
| tboverride-account | Override the username blacklist |
| templateeditor | Edit protected templates |
| transcode-reset | Reset failed or transcoded videos so they are inserted into the job queue again |
| transcode-status | View information about the current transcode activity |
| unblockself | Unblock oneself |
| undelete | Undelete a page |
| unwatchedpages | View a list of unwatched pages |
| upload | Upload files |
| upload_by_url | Upload files from a URL |
Steward
37 accounts on all wikis have these permissions:
| abusefilter-hidden-log | View hidden abuse log entries |
| abusefilter-log | View the abuse log |
| abusefilter-log-detail | View detailed abuse log entries |
| abusefilter-log-private | View log entries of abuse filters marked as private |
| abusefilter-modify | Create or modify abuse filters |
| abusefilter-modify-restricted | Modify abuse filters with restricted actions |
| abusefilter-privatedetails-log | View the AbuseFilter private details access log |
| abusefilter-revert | Revert all changes by a given abuse filter |
| abusefilter-view | View abuse filters |
| abusefilter-view-private | View abuse filters marked as private |
| apihighlimits | Use higher limits in API queries |
| autoconfirmed | Not be affected by IP-based rate limits |
| autopatrol | Have one's own edits automatically marked as patrolled |
| autoreviewrestore | Auto-review on rollback |
| bigdelete | Delete pages with large histories |
| block | Block other users from editing |
| blockemail | Block a user from sending email |
| browsearchive | Search deleted pages |
| centralauth-createlocal | Forcibly create a local account for a global account |
| centralauth-merge | Merge their account |
| centralnotice-admin | Manage central notices |
| checkuser-log | View the checkuser log |
| createaccount | Create new user accounts |
| createpage | Create pages (which are not discussion pages) |
| createtalk | Create discussion pages |
| delete | Delete pages |
| deletechangetags | Delete tags from the database |
| deletedhistory | View deleted history entries, without their associated text |
| deletedtext | View deleted text and changes between deleted revisions |
| deletelogentry | Delete and undelete specific log entries |
| deleterevision | Delete and undelete specific revisions of pages |
| edit | Edit pages |
| editcontentmodel | Edit the content model of a page |
| editeditorprotected | Edit pages protected as "Allow only editors" |
| editextendedsemiprotected | Edit pages protected as "Allow only autopatrollers" |
| editinterface | Edit the user interface |
| editmyoptions | Edit your own preferences |
| editprotected | Edit pages protected as "Allow only administrators" |
| editsemiprotected | Edit pages protected as "Allow only autoconfirmed users" |
| editsitecss | Edit sitewide CSS |
| editsitejs | Edit sitewide JavaScript |
| editsitejson | Edit sitewide JSON |
| editusercss | Edit other users' CSS files |
| edituserjs | Edit other users' JavaScript files |
| edituserjson | Edit other users' JSON files |
| extendedconfirmed | Edit restricted pages |
| flow-create-board | Create Structured Discussions boards in any location |
| flow-delete | Delete Structured Discussions topics and posts |
| flow-edit-post | Edit Structured Discussions posts by other users |
| flow-hide | Hide Structured Discussions topics and posts |
| flow-suppress | Suppress Structured Discussions revisions |
| globalblock-exempt | Bypass global blocks |
| globalblock-whitelist | Disable global blocks locally |
| gwtoolset | Use GWToolset |
| hideuser | Block a username, hiding it from the public |
| import | Import pages from other wikis |
| importupload | Import pages from a file upload |
| ipblock-exempt | Bypass IP blocks, auto-blocks and range blocks |
| managechangetags | Create and (de)activate tags |
| markbotedits | Mark rolled-back edits as bot edits |
| massmessage | Send a message to multiple users at once |
| mergehistory | Merge the history of pages |
| move | Move pages |
| move-categorypages | Move category pages |
| move-rootuserpages | Move root user pages |
| move-subpages | Move pages with their subpages |
| movefile | Move files |
| movestable | Move pages with stable versions |
| mwoauthmanageconsumer | Manage OAuth consumers |
| mwoauthsuppress | Suppress OAuth consumers |
| mwoauthviewprivate | View private OAuth data |
| mwoauthviewsuppressed | View suppressed OAuth consumers |
| newsletter-create | Create newsletters |
| newsletter-delete | Delete newsletters |
| newsletter-manage | Add or remove publishers or subscribers from newsletters |
| newsletter-restore | Restore a newsletter |
| noratelimit | Not be affected by rate limits |
| nuke | Mass delete pages |
| oathauth-enable | Enable two-factor authentication |
| oathauth-view-log | Access to log of two-factor authentication changes |
| override-antispoof | Override the spoofing checks |
| pagetranslation | Mark versions of pages for translation |
| patrol | Mark others' edits as patrolled |
| patrolmarks | View recent changes patrol marks |
| protect | Change protection levels and edit cascade-protected pages |
| purge | Purge the cache for a page |
| renameuser | Rename users |
| reupload | Overwrite existing files |
| reupload-own | Overwrite existing files uploaded by oneself |
| reupload-shared | Override files on the shared media repository locally |
| rollback | Quickly rollback the edits of the last user who edited a particular page |
| setmentor | Set user's mentor |
| skipcaptcha | Perform CAPTCHA-triggering actions without having to go through the CAPTCHA |
| spamblacklistlog | View the spam blacklist log |
| stablesettings | Configure how the stable version is selected and displayed |
| suppressionlog | View private logs |
| suppressredirect | Not create redirects from source pages when moving pages |
| tboverride | Override the title or username blacklist |
| tboverride-account | Override the username blacklist |
| templateeditor | Edit protected templates |
| titleblacklistlog | View title blacklist log |
| torunblocked | Bypass automatic blocks of Tor exit nodes |
| transcode-status | View information about the current transcode activity |
| translate-import | Import offline translations |
| translate-manage | Manage message groups |
| translate-messagereview | Review translations |
| unblockself | Unblock oneself |
| undelete | Undelete a page |
| unwatchedpages | View a list of unwatched pages |
| upload | Upload files |
| upload_by_url | Upload files from a URL |
| viewsuppressed | View revisions hidden from any user |
| writeapi | Use of the write API |
Sysadmin
10 accounts on all wikis have these permissions:
| abusefilter-hidden-log | View hidden abuse log entries |
| abusefilter-hide-log | Hide entries in the abuse log |
| abusefilter-log | View the abuse log |
| abusefilter-log-detail | View detailed abuse log entries |
| abusefilter-log-private | View log entries of abuse filters marked as private |
| abusefilter-modify | Create or modify abuse filters |
| abusefilter-modify-global | Create or modify global abuse filters |
| abusefilter-modify-restricted | Modify abuse filters with restricted actions |
| abusefilter-revert | Revert all changes by a given abuse filter |
| abusefilter-view | View abuse filters |
| abusefilter-view-private | View abuse filters marked as private |
| apihighlimits | Use higher limits in API queries |
| autoconfirmed | Not be affected by IP-based rate limits |
| autopatrol | Have one's own edits automatically marked as patrolled |
| bigdelete | Delete pages with large histories |
| block | Block other users from editing |
| blockemail | Block a user from sending email |
| browsearchive | Search deleted pages |
| centralauth-lock | Lock or unlock global account |
| centralauth-merge | Merge their account |
| centralauth-oversight | Suppress or hide global account |
| centralauth-rename | Rename global accounts |
| centralauth-unmerge | Unmerge global account |
| delete | Delete pages |
| deletechangetags | Delete tags from the database |
| deletedhistory | View deleted history entries, without their associated text |
| deletedtext | View deleted text and changes between deleted revisions |
| deletelogentry | Delete and undelete specific log entries |
| deleterevision | Delete and undelete specific revisions of pages |
| edit | Edit pages |
| editinterface | Edit the user interface |
| editprotected | Edit pages protected as "Allow only administrators" |
| editsitecss | Edit sitewide CSS |
| editsitejs | Edit sitewide JavaScript |
| editsitejson | Edit sitewide JSON |
| editusercss | Edit other users' CSS files |
| edituserjs | Edit other users' JavaScript files |
| edituserjson | Edit other users' JSON files |
| flow-create-board | Create Structured Discussions boards in any location |
| flow-delete | Delete Structured Discussions topics and posts |
| globalgroupmembership | Edit membership to global groups |
| globalgrouppermissions | Manage global groups |
| ipblock-exempt | Bypass IP blocks, auto-blocks and range blocks |
| oathauth-disable-for-user | Disable two-factor authentication for a user |
| oathauth-enable | Enable two-factor authentication |
| oathauth-verify-user | Verify whether a user has two-factor authentication enabled |
| oathauth-view-log | Access to log of two-factor authentication changes |
| override-export-depth | Export pages including linked pages up to a depth of 5 |
| renameuser | Rename users |
| skipcaptcha | Perform CAPTCHA-triggering actions without having to go through the CAPTCHA |
| suppressredirect | Not create redirects from source pages when moving pages |
| tboverride | Override the title or username blacklist |
| tboverride-account | Override the username blacklist |
| templateeditor | Edit protected templates |
| unblockself | Unblock oneself |
| undelete | Undelete a page |
| upload_by_url | Upload files from a URL |
| userrights | Edit all user rights |
| userrights-interwiki | Edit user rights of users on other wikis |
Vrt-permissions
215 accounts on all wikis have these permissions:
| oathauth-enable | Enable two-factor authentication |
| read | Read pages |
Wmf-ops-monitoring
1 account on all wikis has these permissions:
| bot | Be treated as an automated process |
Wmf-researcher
1 account on all wikis has these permissions:
| apihighlimits | Use higher limits in API queries |
| browsearchive | Search deleted pages |
| deletedhistory | View deleted history entries, without their associated text |
| deletedtext | View deleted text and changes between deleted revisions |
| oathauth-enable | Enable two-factor authentication |
| suppressionlog | View private logs |
| undelete | Undelete a page |
| viewsuppressed | View revisions hidden from any user |
