How access works
Learn how Discord Roles, Dashboard Roles, and approvals control who can access your workspace.
Discord Roles help decide who qualifies for dashboard access, but they never grant it by themselves. You approve each person for a Dashboard Role, and that role determines what they can do.
Access is always explicit
A Discord Role can qualify someone for a Dashboard Role, but each person still needs your approval.
Someone can open the workspace only when all three are true:
- The owner has turned on the Access switch.
- Someone with access has approved them for a Dashboard Role.
- They currently hold a Discord Role linked to that Dashboard Role.
If any one is missing, they can't open the workspace.
Why Discord Roles only set eligibility
Changing someone's Discord Roles doesn't always end their dashboard access. If you demote someone but they still hold another Discord Role linked to a Dashboard Role you've approved them for, they keep that access. Use Remove access when they no longer need it. If they lose every linked role, AeroNexus removes the approval automatically.
A Discord Role alone never replaces your approval. Giving someone a linked role only qualifies them for a Dashboard Role; it doesn't approve them for access.
The four building blocks
These four terms explain how you set permissions and approve people.
Dashboard Role
A Dashboard Role is a role you create in AeroNexus. It defines dashboard permissions, the Discord Roles that qualify someone for it, and which people you've approved.
Discord Role
A Discord Role is a role in your linked Discord server. It can qualify someone for a Dashboard Role, but it never grants dashboard access by itself.
Dashboard Grant
A Dashboard Grant is your approval for one person to use one Dashboard Role. It stays active while they hold at least one Discord Role linked to it. Use Grant access to approve someone and Remove access to revoke it. Losing all linked roles removes the grant automatically.
Discord Eligibility
Discord Eligibility means the person is in your linked server and holds at least one Discord Role linked to a Dashboard Role you've approved them for.
| Building block | TL;DR |
|---|---|
| Dashboard Role | Sets permissions and linked Discord Roles. |
| Discord Role | Qualifies someone; doesn't grant access alone. |
| Dashboard Grant | Your approval for one person to use a role. |
| Discord Eligibility | Confirms they hold a linked role in your server. |
Effective Permissions are additive
Someone's Effective Permissions include the permissions from every Dashboard Role they've been approved for and can currently use. Permissions from different roles add together. If two roles include the same permission, they keep it while either role still grants it.
Active grant
Events team
- View Modmail
Active grant
Media team
- Manage Welcome Messages
Effective Permissions
Jordan
- View Modmail
- Manage Welcome Messages
Starting from the example above, watch View Tickets get added to each role. Jordan has an active grant for both, so the permission stays on while either role grants it.
Dashboard Role
Events team
Dashboard Role
Media team
Effective Permissions
Jordan
Neither role grants View Tickets, so Jordan doesn't have this permission.
If you remove Jordan's approval on Media team, they lose Manage Welcome
Messages and keep the permissions from Events team.
You can use small roles for different responsibilities. A shared permission stays available as long as one of the person's active roles grants it.
The owner bypass
As the group owner, you always have full access to your workspace. Nobody can remove it. You control the Access switch for everyone else. Turning it off blocks other members but keeps their approvals; turning it back on restores access for people whose approvals are still valid.
Dashboard Administrator
The Administrator permission gives someone full control of the workspace, including all current permissions and any added later. They can manage access, create Dashboard Roles, and approve other administrators. People with this permission have a red Administrator badge wherever roles are listed.
Your owner access can't be removed. Administrator access comes from a Dashboard Role grant, so you can revoke it by removing the grant, removing Administrator from the role, or removing every Discord Role linked to that role from them.
Administrator gives someone full control, including the ability to approve other administrators. Only grant it to people you fully trust. AeroNexus asks you to confirm before enabling it and before granting it to someone.
A worked example
Here's an example for an airline group:
- You create a Dashboard Role named
Events team, give it the Modmail view permissions, link the Discord RoleEvents Crew, and approve Jordan with Grant access. - Jordan holds
Events Crew, so they can open the workspace and see the Modmail areas allowed byEvents team. - Next week you create
Media teamwith Manage Welcome Messages, link the Discord RoleMedia Crew, and approve Jordan for that role too. Jordan now has both roles' permissions. - Jordan leaves the server, so both grants are removed. You can see this under Recent access changes on the Overview page.
- If Jordan rejoins and gets
Events Crewagain, grant them access again. Having the Discord Role doesn't restore the old approval.
Opening an approved group
An approved group stays in your group picker while access is being checked, but you'll see only basic information until the check finishes. If the group doesn't open, try again later. Access can take a while to update after a change.
Next steps
- Build your first role with create a Dashboard Role.
- Learn the day-to-day flow in manage grants.
- Compare permissions in the Dashboard permission reference.
Last updated on