Template:User access levels

Special:ListGroupRights is an automatically generated list of granted user group rights. The below table is manually updated, and also includes global groups with local access.

User right	Allows users to…	Other groups^[c]
abusefilter-access-protected-vars	View and create filters that use protected variables	EFM, EFH
abusefilter-bypass-blocked-external-domains	Bypass blocked external domains
abusefilter-hidden-log	View hidden abuse log entries	OS
abusefilter-hide-log	Hide entries in the abuse log	OS
abusefilter-log	View the abuse log
abusefilter-log-detail	View detailed abuse log entries	GR
abusefilter-log-private	View edit filters marked as private
abusefilter-modify	Modify abuse filters	EFM
abusefilter-modify-blocked-external-domains	Create or modify what external domains are blocked from being linked
abusefilter-modify-restricted	Modify edit filters with restricted actions
abusefilter-privatedetails	View private data (IP addresses) in the abuse log	CU
abusefilter-privatedetails-log	View the AbuseFilter private details access log
abusefilter-protected-vars-log	View logs related to accessing protected variable values
abusefilter-revert	Revert all changes by a given abuse filter
abusefilter-view	View non-private abuse filters
abusefilter-view-private	View edit filters marked as private	CU, EFH, EFM, OS
apihighlimits	Request API queries in batches of 5,000, rather than 500	Researchers
applychangetags	Apply tags along with one's changes
autoconfirmed	Not be affected by IP-based rate limits	PCR, GR, IE
autopatrol	Automatically mark all edits made by the user as patrolled	AP, GR
autoreview	Automatically mark all revisions made by the user as "accepted"	PCR
bigdelete	Delete pages with over 5,000 revisions	Stewards
block	Block an IP address, user account, or range of IP addresses, from editing
blockemail	Block a user from sending email
bot	Edit without their edits showing up in recent changes
browsearchive	Search deleted pages	CU, OS, Researchers
centralauth-create-local	Forcibly create a local account for a global account
centralauth-merge	Merge their account^[d]
changetags	Add and remove arbitrary tags on individual revisions and log entries	EFM
checkuser	View all IP addresses used by a user account or show all edits from a given IP address	CU, Ombuds
checkuser-log	View the checkuser log	CU, Ombuds
checkuser-temporary-account	View IP addresses used by temporary accounts	TAIPV, Ombuds, GTAIPV
checkuser-temporary-account-log	View the log of access to temporary account IP addresses	CU, Ombuds
checkuser-temporary-account-no-preference	View IP addresses used by temporary accounts without needing to check the preference	CU, Ombuds
collectionsaveasuserpage	Save books as user subpage
createaccount	Create a new user account for themselves or another user	ACCP
createpage	Create a new page
createpagemainns	Create a new mainspace page (users without this right are redirected to the Article Creation Workflow landing page)
createtalk	Create a new talk page
delete	Delete a page with ≤ 5,000 revisions
deletechangetags	Delete tags from the database
deletedhistory	View the history of a deleted page or a user's deleted contributions, provided it is not CSS or JS	CU, OS, Researchers
delete-redirect	Delete single revision redirects during page moves	PMR
deletedtext	View the text of deleted revisions, provided the page is not CSS or JS	CU, Ombuds, OS, Researchers
deletelogentry	Access the RevisionDelete tool and change the public visibility of log entries	OS
deleterevision	Access the RevisionDelete tool and change the public visibility of edit revisions	OS
edit	Edit any page which is not protected	IE
editcontentmodel	Edit the content model of a page	TE, IE
editinterface	Edit the MediaWiki namespace to affect the interface	IA, IE
editmyoptions	Edit your own preferences
editmyprivateinfo	Edit your own private data (e.g. email address, real name)
editmyusercss	Edit your own user .css files
editmyuserjs	Edit your own user .js files
editmyuserjson	Edit your own user .json files
editmywatchlist	Edit your own watchlist
editprotected	Edit fully-protected pages	IE
editsemiprotected	Edit semi-protected pages	PCR, GR, IE
editsitecss	Edit sitewide .css files	IA, IE
editsitejs	Edit sitewide .js files
editsitejson	Edit sitewide .json files
editusercss	Edit other users' .css files
edituserjs	Edit other users' .js files
edituserjson	Edit other users' .json files	IA
extendedconfirmed	Edit 30/500 protected pages	XC, IE
globalblock-whitelist	Disable global blocks locally
hideuser	Block a username, hiding it from the public	OS
import	Import pages from other wikis	IMP, TWI
importupload	Import pages from a locally stored XML file	IMP
ipblock-exempt	Be unaffected by blocks applied to the user's IP address or a range (CIDR) containing it	IPBE
managechangetags	Create and (de)activate tags	EFM
managementors	Manage the list of mentors
markbotedits	Mark rollback as bot edits, to keep them out of recent changes	GR^[e]
massmessage	Send a message to multiple users at once	MMS
mergehistory	Merge the history of pages	IMP
minoredit	Make an edit marked as 'minor'
move	Change the title of a page by moving it	PMR, GR
move-categorypages	Change the title of a category by moving it	PMR
movefile	Change the title of a file by moving it	FMV
move-rootuserpages	Move root user pages
move-subpages	Move pages with their subpages	PMR, TE
movestable	Move pages under pending changes	GR
mwoauthmanagemygrants	Manage OAuth grants
nominornewtalk	Minor edits by this user to user talk pages do not trigger the "you have new messages" banner
noratelimit	Not be affected by rate limits	ACCP, EVC, GR^[e], Stewards
nuke	Mass delete pages
oathauth-enable	Enable two-factor authentication	CU, EFM, Founder, IMP, IA, OS, TE, TWI
override-antispoof	Allows the creation of accounts with mixed-script, confusing and similar usernames	ACCP
pagetriage-copyvio	Tag pages in the Special:NewPagesFeed as likely copyright violations, through the pagetriage-tagcopyvio API	Copyright violation bots
patrol	State that they have checked a page that appeared in Special:Newpages	NPR
protect	Change protection levels, edit and move protected pages, and edit cascade-protected pages	IE
purge	Purge a page by adding `&action=purge` to the URL
read	Read pages
renameuser	Change the name of an existing account	Global renamers, Stewards
reupload	Overwrite an existing unprotected file
reupload-own	Overwrite existing files uploaded by oneself
reupload-shared	Override files on the shared media repository locally
review	Mark revisions as being "accepted"	PCR
rollback	Use a special link to more easily revert a bad edit	RBK, GR^[e]
sboverride	Bypass the spam block list
sendemail	Email a user (using `Special:EmailUser/username`) who have associated an email address with themselves
setmentor	Set user's mentor
skipcaptcha	Perform CAPTCHA-triggering actions without having to go through the CAPTCHA	GR
spamblacklistlog	View the spam blacklist log	EFH
stablesettings	Configure how the latest accepted revision is selected and displayed
suppressionlog	View private logs	OS
suppressredirect	Not create a redirect from the old name when moving a page	GR^[e], PMR, IE
suppressrevision	Access the RevisionDelete tool and change the public and administrator visibility of edit revisions and logs	OS
tboverride	Override the title blacklist	TE, PMR, IE
tboverride-account	Override the username blacklist	ACCP
templateeditor	Edit pages under template protection	TE, IE
titleblacklistlog	View title blacklist log (note: the log is empty, as it has not been enabled)
torunblocked	Bypass automatic blocks of Tor exit nodes	IPBE
transcode-reset	Reset failed or transcoded videos so they are inserted into the job queue again
transcode-status	View information about the current transcode activity
undelete	Undelete a previously deleted page or specific revisions from it, view deleted revisions
unwatchedpages	View a list of pages which are not on anyone's watchlist
upload	Upload a media file
urlshortener-create-url	Create short URLs
userrights	Edit all user rights	Stewards
viewmyprivateinfo	View your own private data (e.g. email address, real name)
viewmywatchlist	View your own watchlist
viewsuppressed	View revisions hidden from any user	OS
vipsscaler-test	Use the VIPS scaling test interface
writeapi	Use of the write API

^ Includes IP users. Any permission granted to all users will be inherited by the other user groups.
^ Any permission granted to registered accounts will be inherited by the other (registered) user groups.
^ Any user listed in this column has the relevant permission. Italics indicate a global permission.
^ Irrelevant since the SUL finalisation in 2015 where all mergeable accounts were merged.
^ ^a ^b ^c ^d Per Wikipedia:Global rights policy, Global rollbackers are only allowed to use this right in the context of counter-vandalism efforts.

[all-1] Includes IP users. Any permission granted to all users will be inherited by the other user groups.

[reg-2] Any permission granted to registered accounts will be inherited by the other (registered) user groups.

[other-3] Any user listed in this column has the relevant permission. Italics indicate a global permission.

[accountmerge-4] Irrelevant since the SUL finalisation in 2015 where all mergeable accounts were merged.

[GRP-5] Per Wikipedia:Global rights policy, Global rollbackers are only allowed to use this right in the context of counter-vandalism efforts.

[a]

[b]

[c]

[d]

[e]