Access control

SoAI uses a role-based access control list (ACL) to decide which authenticated accounts may use administrative, model, tool, file, hardware, and system capabilities. Each account has either the Administrator or Regular user role; the ACL page calls the latter Standard user. The policy assigns actions to roles, so changing a Standard user permission changes it for every Regular user account. Use Users to change one account's role and ACL to change what each role can do.

Manage role permissions

An administrator with ACL administration (ACL_ADMIN) opens Settings > ACL. Expand Administrator or Standard user, change the available toggles, then select Save. The security policy fixes disabled controls, and the Bootstrap and Anonymous roles are immutable. To discard every override, open Reset, find ACL policy, and select Reset after reading the confirmation.

Administrators start with every action. The reference marks the initial Standard user actions as Standard: default. An ACL administrator can enable entries marked Standard: optional. Administrator-only actions cannot be granted to the Standard role. ACL administration, licensing administration, and recovery administration cannot be removed from the Administrator role.

A signed-in human account can manage its own skill library without plugin-administration permission. Skills have no separate ACL action. WebUI imports and changes to tool settings require MCP usage (MCP_USE), and actions requested by a skill still require their normal permissions, such as Terminal and shell access (TERMINAL_USE) for shell work. A skill cannot grant access to another account's resources or bypass tool approvals.

Permission reference

Permission Action ID Allows Availability
ACL administration ACL_ADMIN Modify access control policies. Administrator only; required
API key management OPENAI_API_ADMIN Manage compatible inference API keys. Administrator only
Backup administration BACKUP_ADMIN Create, restore, and delete backups. Administrator only
Bootstrap setup access WIZARD_BOOTSTRAP Access the setup surface before the first account and normal ACL state exist. Bootstrap only; fixed
Configuration changes CONFIG_PATCH Modify Core configuration settings. Administrator only
Factory reset FACTORY_RESET Reset the system to factory defaults. Administrator only
Files administration FILE_EXPLORER_ADMIN Perform privileged file operations. Administrator only
Files hashing FILE_EXPLORER_HASH Generate file hashes. Standard: default
Files reading FILE_EXPLORER_READ Read files and directories. Standard: default
Files writing FILE_EXPLORER_WRITE Create, edit, move, copy, and delete files. Administrator only
GPU tuning HW_GPU_TUNING Adjust GPU power and clock settings. Administrator only
Hardware read access HARDWARE_READ View hardware snapshots, capabilities, GPU slot state, exports, and history. Standard: optional
Internal search access SEARCH_READ Search across internal SoAI resources. Standard: default
Licensing administration LICENSING_ADMIN Review licensing status and perform licensing maintenance and recovery actions. Administrator only; required
Log access LOG_ACCESS View system logs. Administrator only
MCP administration MCP_ADMIN Install, configure, and remove MCP servers. Administrator only
MCP usage MCP_USE Use MCP tools and resources. Standard: default
Metrics reset METRICS_RESET Clear system metrics and statistics. Administrator only
Model administration MODEL_ADMIN Download and delete models, and update managed model records and parameters. Administrator only
Model read access MODEL_READ View model catalogs, metadata, and parameters. Standard: default
Model routing MODEL_ROUTING_ADMIN Configure virtual models and routing. Administrator only
Notifications NOTIFICATIONS View and manage in-app notifications. Standard: default
Plugin administration PLUGIN_ADMIN Install, enable, and remove plugins. Administrator only
Plugin read access PLUGIN_READ View plugin catalogs, capabilities, and remote model search results. Standard: default
Process viewing HW_PROCESS_VIEW View system process lists. Administrator only
Public inference API access OPENAI_API Call OpenAI-compatible and Anthropic-compatible /v1 endpoints. Standard: default
RAG access RAG_USE Use retrieval-augmented generation. Standard: default
Recovery administration RECOVERY_ADMIN Use safe repair and recovery operations while ordinary execution is restricted. Administrator only; required
Request cancellation REQUEST_CANCELLATION_ADMIN Cancel running requests. Administrator only
Routing read access MODEL_ROUTING_READ View virtual model and routing configuration. Standard: optional
SoAI OS administration HOST_MANAGEMENT_ADMIN Run privileged SoAI OS management actions. Administrator only
Software updates SOFTWARE_UPDATE Update SoAI software. Administrator only
System power control SYSTEM_POWER Shut down, reboot, or restart the system. Administrator only
System status access SYSTEM_STATUS_READ View operational system status and restart state. Standard: optional
Task management TASK_MANAGEMENT Create, view, and manage background tasks. Standard: default
Terminal and shell access TERMINAL_USE Use the WebUI terminal and MCP shell tools to execute host commands. Standard: optional
UI customization WEBUI_APPEARANCE_ADMIN Customize the shared WebUI wallpaper and appearance. Administrator only
User administration USER_ADMIN Create, modify, and delete user accounts. Administrator only

Related documentation