Permissions, role order and who is never banned
The Discord permissions stingsby needs and why, where its role must sit to ban spammers, and which members and roles are never banned.
Permissions & role order
Stingsby is added with exactly these permissions (value 1099511720980):
| Permission | Why stingsby needs it |
|---|---|
| Ban Members | The whole point, plus the Unban button on ban reports |
| Manage Channels | Only so /honeypot setup can create the trap channel for you |
| View Channels | Seeing messages in the honeypot |
| Send Messages, Embed Links | The warning, ban reports and setting-change notices |
| Manage Messages | Pinning the warning, deleting spam if a ban fails, and /clear |
| Read Message History | Needed alongside the above, and for /clear |
| Timeout Members | The timeout and escalating actions, and the 🔊 Remove timeout button |
Manage Server is not included, on purpose. Stingsby only needs it for two things that are off by default: to pause DMs or invites during a raid, and to read your invites for the join log. If you plan to use either, give Manage Server to the stingsby role first (Server Settings → Roles). Without it you still get the alerts, but nothing is paused, the join log doesn't show who invited people, and /config shows a warning.
Where the bot's role goes
This is the most common setup mistake. Staff roles can stay above the bot, because staff are never banned anyway.
/honeypot status, /config and /security scan all flag regular roles above the bot. If you use channel permission overrides, make sure stingsby has View Channel in the trap and Send Messages + Embed Links in the log channel.
Who is never banned
- Bots and webhooks
- The server owner
- Anyone with Administrator, Manage Server or Ban Members, so staff can post in the trap, e.g. to update the warning
- Anyone with a role picked in the 🛡️ Exempt roles menu of
/config
Everyone else is banned, including long-time members whose account was compromised. That's on purpose: a compromised account looks exactly like its owner. Once they recover it, they can ask to be unbanned.