Skip to main content

​
DAC v2: Delegated Access Control

Discord’s Administrator permission is an all-or-nothing switch. Once you give a staff member Administrator rights, they can delete channels, kick members, edit webhook integrations, and overwrite permissions across your entire server. If a staff member’s Discord account gets compromised or their token leaks through malware, an attacker can destroy your community in seconds. DAC v2 (Delegated Access Control) eliminates this vulnerability by decoupling bot management from native Discord permissions.

​
How DAC v2 Protects Your Server

Instead of granting raw Discord Administrator rights to your moderation team, DAC v2 lets you assign temporary, audited access leases.
  1. Zero Administrator Roles: Staff members only have the basic Discord roles needed to read and send messages in staff channels.
  2. 39 Granular Permissions: Define exactly which bot modules each staff role can manage. For example, allow your event managers to configure giveaways and polls without giving them access to Anti-Raid or sanction logs.
  3. 15-Minute Ephemeral Sessions: Staff initiate an active session with /dac session start. The session expires automatically after 15 minutes of inactivity.
  4. Enforced Two-Factor Authentication: Sensitive operations (such as modifying quarantine thresholds or backing up server configurations) require an interactive 2FA confirmation code.
  5. Signed Audit Logs: Every single toggle, rule modification, and channel override is logged with the staff member’s user ID, IP hash, and timestamp in your private security channel.

​
DAC v2 Permission Scopes

DAC v2 covers all 40 MyProtect modules across 6 logical domains:

​
Configuring DAC v2

You can manage your staff access policies using /config in Discord or through the Web Dashboard.

​
In Discord (/config)

  1. Run /config in your private staff channel.
  2. Select Moderation & Access > DAC v2 Configuration.
  3. Choose the role you want to configure (for example, @Moderator).
  4. Toggle the specific permissions you want to grant to that role.
  5. Click Save Changes.

​
In the Web Dashboard

  1. Navigate to myprotect-bot.fr and open your server settings.
  2. Select Team & Access (DAC v2) in the sidebar.
  3. Drag and drop roles into permission tiers or customize specific action overrides.
  4. Set required 2FA levels and session timeout policies.
  5. Click Deploy Policies.