Chapter 6. Oper privileges

6.1. Meanings of oper privileges

These are flags in operator{}. The letter appears after opering up and in /stats o; an uppercase letter means the privilege is possessed, lowercase means it is not.

6.1.1. admin (A), server administrator

Various privileges intended for server administrators. Among other things, this automatically sets umode +a and allows loading modules.

6.1.2. remoteban (B), set remote bans

This grants the ability to use the ON argument on DLINE/KLINE/XLINE/RESV and UNDLINE/UNKLINE/UNXLINE/UNRESV to set and unset bans on other servers, and the server argument on REHASH. This is only allowed if the oper may perform the action locally, and if the remote server has a shared{} block.

Note: If a cluster{} block is present, bans are sent remotely even if the oper does not have remoteban privilege.

6.1.3. local_kill (C), kill local users

This grants permission to use KILL on users on the same server, disconnecting them from the network.

6.1.4. die (D), die and restart

This grants permission to use DIE and RESTART, shutting down or restarting the server.

6.1.5. rehash (H), rehash

Allows using the REHASH command, to rehash various configuration files or clear certain lists.

6.1.6. kline (K), kline and dline

Allows using KLINE and DLINE, to ban users by user@host mask or IP address.

6.1.7. operwall (L), send/receive operwall

Allows using the OPERWALL command and umode +z to send and receive operwalls.

6.1.8. mass_notice (M), global notices and wallops

Allows using server name ($$mask) and hostname ($#mask) masks in NOTICE and PRIVMSG to send a message to all matching users, and allows using the WALLOPS command to send a message to all users with umode +w set.

6.1.9. nick_changes (N), see nick changes

Allows using snomask +n to see local client nick changes. This is designed for monitor bots.

6.1.10. global_kill (O), global kill

Allows using KILL on users on any server.

6.1.11. hidden_oper (P), hide from /stats p

This privilege currently does nothing, but was designed to hide bots from /stats p so users will not message them for help.

6.1.12. resv (Q), channel control

This allows using /resv, /unresv and changing the channel modes +L and +P.

6.1.13. remote (R), remote routing

This allows using the third argument of the CONNECT command, to instruct another server to connect somewhere, and using SQUIT with an argument that is not locally connected. (In both cases all opers with +w set will be notified.)

6.1.14. oper_spy (S), use operspy

This allows using /mode !#channel, /whois !nick, /who !#channel, /chantrace !#channel, /who !mask, /masktrace !user@host :gecos and /scan umodes +modes-modes global list to see through secret channels, invisible users, etc.

All operspy usage is broadcasted to opers with snomask +Z set (on the entire network) and optionally logged. If you grant this to anyone, it is a good idea to establish concrete policies describing what it is to be used for, and what not.

If operspy_dont_care_user_info is enabled, /who mask is operspy also, and /who !mask, /who mask, /masktrace !user@host :gecos and /scan umodes +modes-modes global list do not generate +Z notices or logs.

6.1.15. unkline (U), unkline and undline

Allows using UNKLINE and UNDLINE.

6.1.16. xline (X), xline and unxline

Allows using XLINE and UNXLINE, to ban/unban users by realname.

6.1.17. hidden_admin, hidden administrator

This grants everything granted to the admin privilege, except the ability to set umode +a. If both admin and hidden_admin are possessed, umode +a can still not be used.

Note: This privilege does not appear in /stats o or oper up notices.