> ## Documentation Index
> Fetch the complete documentation index at: https://docs.myprotect-bot.fr/llms.txt
> Use this file to discover all available pages before exploring further.

# DAC v2: Delegated Access Control

> Safely grant staff members permission to configure bot modules without giving them dangerous Discord Administrator permissions.

# DAC v2: Delegated Access Control

Discord's **Administrator** permission is an all-or-nothing switch. Once you give a staff member Administrator rights, they can delete channels, kick members, edit webhook integrations, and overwrite permissions across your entire server.

If a staff member's Discord account gets compromised or their token leaks through malware, an attacker can destroy your community in seconds.

**DAC v2 (Delegated Access Control)** eliminates this vulnerability by decoupling bot management from native Discord permissions.

***

## How DAC v2 Protects Your Server

Instead of granting raw Discord Administrator rights to your moderation team, DAC v2 lets you assign temporary, audited access leases.

```text theme={null}
[ Staff Member needs to update Anti-Raid rules ]
                       │
                       ▼
            [ Runs /dac session start ]
                       │
                       ▼
          [ 2FA Verification via DM / App ]
                       │
                       ▼
         [ 15-Minute Scoped Lease Granted ]
                       │
       ┌───────────────┴───────────────┐
       ▼                               ▼
[ Access Scoped Modules Only ]   [ Cryptographically Signed Audit Log ]
```

1. **Zero Administrator Roles**: Staff members only have the basic Discord roles needed to read and send messages in staff channels.
2. **39 Granular Permissions**: Define exactly which bot modules each staff role can manage. For example, allow your event managers to configure giveaways and polls without giving them access to Anti-Raid or sanction logs.
3. **15-Minute Ephemeral Sessions**: Staff initiate an active session with `/dac session start`. The session expires automatically after 15 minutes of inactivity.
4. **Enforced Two-Factor Authentication**: Sensitive operations (such as modifying quarantine thresholds or backing up server configurations) require an interactive 2FA confirmation code.
5. **Signed Audit Logs**: Every single toggle, rule modification, and channel override is logged with the staff member's user ID, IP hash, and timestamp in your private security channel.

***

## DAC v2 Permission Scopes

DAC v2 covers all 40 MyProtect modules across 6 logical domains:

| Scope Category | Example Permissions | Use Case |
| :- | :- | :- |
| **Security** | `antiraid:edit`, `shieldnet:toggle`, `captcha:configure` | Senior security officers and server owners |
| **Moderation** | `automod:rules`, `sanctions:apply`, `appeals:review` | Community moderators |
| **Support** | `tickets:manage`, `transcripts:read` | Support agents |
| **Engagement** | `levels:rewards`, `giveaways:manage`, `polls:create` | Event managers and community leads |
| **Server Tools** | `backups:create`, `tempvoices:edit`, `counters:sync` | Technical administrators |
| **Core Admin** | `dac:assign_roles`, `bot:restart` | Guild owner exclusively |

***

## Configuring DAC v2

You can manage your staff access policies using `/config` in Discord or through the Web Dashboard.

### In Discord (`/config`)

1. Run `/config` in your private staff channel.
2. Select **Moderation & Access** > **DAC v2 Configuration**.
3. Choose the role you want to configure (for example, `@Moderator`).
4. Toggle the specific permissions you want to grant to that role.
5. Click **Save Changes**.

### In the Web Dashboard

1. Navigate to [myprotect-bot.fr](https://myprotect-bot.fr) and open your server settings.
2. Select **Team & Access (DAC v2)** in the sidebar.
3. Drag and drop roles into permission tiers or customize specific action overrides.
4. Set required 2FA levels and session timeout policies.
5. Click **Deploy Policies**.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.