Permission Hierarchy
Invaro uses a three-tier hierarchy for portal access:- Owners always have full access to everything in the portal.
- Admins always have full access to everything in the portal.
- Staff only see and interact with pages their Access Roles explicitly grant them.
Access Roles
An Access Role connects a Discord role or an Invaro Team to a set of page-level permissions. When a portal member has a Discord role (or team) that matches an Access Role, they gain the permissions defined in that role. If a member matches multiple Access Roles, the one with the highest priority wins on any conflict.Creating an Access Role
Click Add Role in the top-right corner. This opens a full-page editor.Choose a source type
Select Discord Role or Team Tag. Discord Roles are the standard choice for most servers. Team Tags are useful if you use the Team Directory system to organise staff. You cannot change the source type after creation.
Select the role or team
Use the dropdown to pick the specific Discord role or Team this Access Role applies to.
Set a display name and priority (optional)
Give the Access Role a friendly display name — defaults to the role or team name. Set a priority number — higher numbers win when a member matches multiple Access Roles.
Configure page permissions
The Page Permissions table shows every configurable page. For each page you can grant any combination of:
Click the checkbox on the left of each page row to toggle all applicable permissions at once. Individual permission pills can be toggled independently. Permissions that are not applicable to a given page appear greyed out and cannot be toggled.Use Toggle all in the table header to enable or disable all permissions across all pages at once.
| Permission | What it allows |
|---|---|
| View | See the page at all |
| Edit | Modify existing content |
| Create | Add new entries |
| Delete | Remove entries |
| Manage | Full control over all entries |
Configurable Pages
Pages that are always visible (like the portal Overview) and pages that are Owner/Admin-only (like Settings and API Key management) are not configurable. All other pages — including Binds, ModMail, Tickets, Member Stream, Team Directory, Triggers, Audit Logs, Alliance Management, Knowledge Hub, Announcements, LOA Management, and Staff Logbook — can be delegated via Access Roles. Not every permission type applies to every page. Permissions that don’t apply are shown as unavailable and cannot be selected.Managing Access Roles
Each Access Role card shows the role’s name, type (Discord or Team), priority, enabled state, and a summary of configured page permissions.| Action | Description |
|---|---|
| Toggle | Enable or disable the Access Role without deleting it. Disabled roles are ignored during access checks. |
| Edit | Opens the full-page editor to update permissions, display name, or priority. |
| Delete | Permanently removes the Access Role. |
Tips
- Set higher priority numbers for senior staff roles so their permissions take precedence over junior roles.
- A member who holds two Discord roles that each have an Access Role benefits from the highest-priority one.
- Owners and Admins always bypass Access Roles entirely — you cannot restrict them through this system.
