# How to Set Up Roles & Admins on Your Enshrouded Server (/docs/enshrouded/role-setup)



import { Step, Steps } from 'fumadocs-ui/components/steps';

Enshrouded uses a **user group** system — each group has a unique password and specific permissions.

User Groups in enshrouded_server.json [#user-groups-in-enshrouded_serverjson]

A fresh 1.0 config creates these four groups (passwords are randomized — replace them with your own):

```json
"userGroups": [
    {
        "name": "Admin",
        "password": "admin_password",
        "canKickBan": true,
        "canAccessInventories": true,
        "canEditWorld": true,
        "canEditBase": true,
        "canExtendBase": true,
        "reservedSlots": 0
    },
    {
        "name": "Friend",
        "password": "friend_password",
        "canKickBan": false,
        "canAccessInventories": true,
        "canEditWorld": true,
        "canEditBase": true,
        "canExtendBase": false,
        "reservedSlots": 0
    },
    {
        "name": "Guest",
        "password": "guest_password",
        "canKickBan": false,
        "canAccessInventories": false,
        "canEditWorld": true,
        "canEditBase": false,
        "canExtendBase": false,
        "reservedSlots": 0
    },
    {
        "name": "Visitor",
        "password": "visitor_password",
        "canKickBan": false,
        "canAccessInventories": false,
        "canEditWorld": false,
        "canEditBase": false,
        "canExtendBase": false,
        "reservedSlots": 0
    }
]
```

You can rename groups or add new ones with any mix of permissions.

Permissions [#permissions]

| Permission             | Description                                                                                                                     |
| ---------------------- | ------------------------------------------------------------------------------------------------------------------------------- |
| `canKickBan`           | Can kick or permanently ban other players                                                                                       |
| `canAccessInventories` | Can open chests, factories, collections and other containers in player bases (open-world treasure chests are always accessible) |
| `canEditWorld`         | Can terraform or destroy the open world outside bases — turn off for visitor roles to prevent griefing                          |
| `canEditBase`          | Can build, remove, terraform and add/remove water in player bases                                                               |
| `canExtendBase`        | Can place, remove and upgrade Flame Altars                                                                                      |
| `reservedSlots`        | Slots held for this group — the server shows as full to other groups that would take them                                       |

Every group except one with `canEditWorld: false` can fight, gather, dig and do quests in the open world.

How Players Join a Group [#how-players-join-a-group]

Players enter the **group password** (not the server password) when connecting. The server assigns them to the matching group.

> ⚠️ **Every group password must be unique.** Duplicate passwords crash the server on startup.

Kicking & Banning [#kicking--banning]

Players in a group with `canKickBan: true` can kick and ban from the in-game **Social** tab. Bans are stored in `bannedAccounts` in `enshrouded_server.json` and can also be edited there while the server is stopped.

Related Guides [#related-guides]

* [Server Configuration](/docs/enshrouded/server-config)