s&box users/config.json Generator

What is users/config.json?

On a s&box dedicated server, users/config.jsonis the file that defines per-Steam-account permissions. It's a simple JSON array — each entry contains a SteamId, a list of Claims, and a friendly Name. Facepunch ships three default claims out of the box (kick, ban, restart), but claims are just strings, so you can invent your own and check them in C# with Connection.HasPermission("custom_claim").

Default Claims

Add custom claims to gate things like spawn_admin_tool, noclip, or change_map — anything your game decides to implement.

Example Code: Checking a Claim

// On the host, check whether a connection has the 'kick' claim.
public void OnKickRequest( Connection connection, Connection target )
{
    if ( !connection.HasPermission( "kick" ) )
    {
        Log.Warning( $"{connection.DisplayName} tried to kick someone without the kick claim." );
        return;
    }

    target.Kick( "kicked by admin" );
}

Permissions are currently host-side only. Don't check them on the client — only the host has the trustworthy answer.