site.exosphere.sphere.permissions

exosphere.site

{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "Permission overrides for core Sphere actions (member management, module management, permission configuration). Published on the Sphere owner's PDS. Only non-default roles need to be specified — absent keys use the built-in defaults.",
      "key": "literal:self",
      "record": {
        "properties": {
          "disableModule": {
            "description": "Minimum role to disable modules.",
            "ref": "#role",
            "type": "ref"
          },
          "enableModule": {
            "description": "Minimum role to enable modules.",
            "ref": "#role",
            "type": "ref"
          },
          "inviteMember": {
            "description": "Minimum role to invite members.",
            "ref": "#role",
            "type": "ref"
          },
          "revokeMember": {
            "description": "Minimum role to revoke members.",
            "ref": "#role",
            "type": "ref"
          },
          "updateMemberRole": {
            "description": "Minimum role to change member roles.",
            "ref": "#role",
            "type": "ref"
          },
          "updatePermissions": {
            "description": "Minimum role to update permissions.",
            "ref": "#role",
            "type": "ref"
          }
        },
        "type": "object"
      },
      "type": "record"
    },
    "role": {
      "description": "Minimum role required to perform a core sphere action.",
      "knownValues": [
        "owner",
        "admin"
      ],
      "maxLength": 64,
      "type": "string"
    }
  },
  "id": "site.exosphere.sphere.permissions",
  "lexicon": 1
}

Validate Record

Validate a record against site.exosphere.sphere.permissions

Validation Options
Treat any remaining unresolved references as valid

Metadata

DID
did:plc:tztfs5zp6b4feo4u64adfvmq
CID
bafyreigcmpgflizqln5fi5hxudcrl5ykotnsrzq652w3s5u5gxnxrxacme
Indexed At
2026-04-01 16:32 UTC
AT-URI
at://did:plc:tztfs5zp6b4feo4u64adfvmq/com.atproto.lexicon.schema/site.exosphere.sphere.permissions

Similar Lexicons

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • Permission overrides for the feature-requests module of an Exosphere Sphere. Published on the Sphere owner's PDS. Only non-default roles need to be specified — absent keys use the module's built-in defaults.

  • Permission overrides for the kanban module of an Exosphere Sphere. Published on the Sphere owner's PDS. Only non-default roles need to be specified — absent keys use the module's built-in defaults.

  • Published by a Sphere owner or admin on their own PDS to confirm a user's membership. References the member's site.exosphere.sphere.member record. The role field indicates the member's permissions within the Sphere.

  • The group's authorization config. Binds each role to a set of standardized actions and bounds role.assign and eject. Roles compose by union; there are no deny rules.

  • A named bundle of permissions assignable to community members. Lives on the community repo.

Lexicon Garden

@