> For the complete documentation index, see [llms.txt](https://zts-guard.gitbook.io/zts-guard-discord-bot/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://zts-guard.gitbook.io/zts-guard-discord-bot/allowlist-mods.md).

# Allowlist Mods

Registering mods allows moderators to have the ability (if configured) to make announcement or get certain permissions that are not natively given to them via their mod role. Those actions are gated via a successful 2FA authentication with the bot and are time bound.\
\
This provides the ultimate setup for security to prevent a mods account from getting compromised and having native access to make an announcement, ping roles, post scam links, and more.

{% hint style="info" %}
Only the **Server Owner (Cold Admin)** can perform this step.
{% endhint %}

## Steps to allow list a mod

{% stepper %}
{% step %}

### Open Auth allowlist

Within `#ZTS-Guard-Admin` → Type `/setup` → select `Auth allowlist`.
{% endstep %}

{% step %}

### Add a mod

Select `Manage Mods`, then type the Discord username of the user you want to add as a mod.

{% hint style="warning" %}
Mods must set up 2FA within **7 days** of being allow listed, otherwise they will need to be re-registered again.
{% endhint %}
{% endstep %}

{% step %}

### Set Temporary Permission Settings

Within `#ZTS-Guard-Admin` → Type `/setup` → select `Temporary Permission Settings`. Then select `Manage Mod Permissions`, and enter the Discord username of the mod you previously submitted above (This can only be done one user at a time).\
\
Then from the dropdown select what permissions you want the mod to have the ability to select from to temporarily get upon a successful 2FA authentication. The options are what Discord provides available from a permission perspective:\
\
**Administrator:** Grants total access to all server settings and bypasses all channel-specific overrides.\
\
**Manage Server:** Allows changing the server's name/region, creating webhooks, editing AutoMod rules, and adding bots.\
\
**Manage Webhooks:** Allows a user to create, edit, or delete webhooks\
\
**Manage Permissions:** Allows users to add, edit, delete, and rearrange server roles, as well as modify the permission settings for specific text and voice channels\
\
**Manage Channels:** Allows creating, editing, or deleting server channels and categories.\
\
**Manage Roles:** Lets users create, edit, or delete roles that are lower than their own on the role hierarchy.\
\
**Change Nickname:** Allows users to change their own display name.\
\
**Manage Nicknames:** Allows users to change the display names of other members.\
\
**Kick Members:** Removes a user from the server; they can rejoin if they get a new invite link.\
\
**Ban Members:** Permanently removes a user from the server and prevents them from rejoining unless unbanned.\
\
**Timeout Members:** Prevents a disruptive user from speaking, sending messages, or reacting for a set duration.\
\
**Mention @everyone, @here, and All Roles:** This allows a user permission to send server-wide ping notifications tagging roles.\
\
**Manage Messages:** Grants the ability to delete or pin messages sent by other users.\
\
**Send Polls:** allows members to use the built-in polling interface to create surveys in text channels and announcement channels.\
\
**Use Embedded Activities:** Allows users to launch and interact with built-in apps (like games, watch together tools, or collaborative whiteboards) directly inside a voice channel.\
\
**Use Application Commands:** Allows users to use bot and slash commands.\
\
**Use External Applications:** Allows users to use bots and applications connected to their personal Discord accounts, rather than those officially installed on the server.\
\
**Manage Events:** Allows the user to schedule, edit, or cancel server events.\
\
**Manage Allow List Link:** This specific ZTS Guard permission allows a mod the ability to add a link to the anti-link allow list\
\
**Can Post Announcements:** This specific ZTS Guard permission allows the user to post within the specified announcement channels

{% hint style="warning" %}
Only select the permissions you want the moderator to temporarily get, and follow the practice of least privilege; meaning only give them the ability to get permissions they minimally need. 
{% endhint %}
{% endstep %}

{% step %}

### Set the Temporary Permissions timeout

Go back to the `Temporary Permissions Setting` menu and select `Set temporary permissions timeout` and input the amount of time you want each session to last before it requires a 2FA reauthentication.  The time is in minutes.

{% hint style="info" %}
The default is **20 minutes** and is the recommended setting. This controls how long a session lasts before 2FA must be re-entered.
{% endhint %}
{% endstep %}

{% step %}

### 2FA Setup

Once these steps are completed the registered Mods needs to follow the steps outline in [Setup 2FA Authentication App](/zts-guard-discord-bot/setup-2fa-authentication-app.md) to setup their individual 2FA with the`ZTS Guard` Discord Bot for their own discord account!

{% hint style="warning" %}
Reminder Again: Mods must set up 2FA within **7 days** of being allow listed, otherwise they will need to be re-registered again.
{% endhint %}
{% endstep %}
{% endstepper %}