Managing Subusers and Granular Permissions in DustBowl Warden

Managing Subusers & Team Permissions in DustBowl Warden

Operating a successful game community is often a team effort involving co-owners, moderators, server admins, and developers. DustBowl Warden includes a comprehensive role-based access control (RBAC) subuser system that allows you to delegate administrative duties safely without exposing your account password or billing information.

---

Why Subuser Permissions Matter

• Zero Credential Sharing: You never need to share your primary DustBowl account password or two-factor authenticator with staff members.
• Principle of Least Privilege: Grant only the specific capabilities required for each role (e.g., moderators can view the console and restart, but cannot delete server files or wipe backups).
• Audit Transparency: Administrative actions performed by subusers are attributed to their unique user identity in server activity logs.
• Instant Revocation: Revoke access instantly when staff members step down without needing to change server credentials.

---

Inviting a Subuser

1. Log into your control panel at My Servers and select your server instance.
2. Navigate to the Users tab in the instance navigation bar.
3. Click Create New.
4. Enter the email address of the team member you wish to invite. (If they already have a DustBowl account, access is granted immediately; if not, they receive an invitation link to create their credentials).
5. Select the specific permissions you want to grant (detailed below).
6. Click Invite User.

---

Granular Permission Matrix

DustBowl Warden provides fine-grained operational permissions grouped into logical functional areas:

Console & Power Control

• View Console: Read real-time server stdout/stderr stream.
• Send Commands: Execute commands via the interactive console prompt.
• Start / Stop / Restart: Trigger power state transitions.
• Kill Process: Force terminate an unresponsive server container.

File Management

• View Files: Browse folder hierarchies in the Web File Manager.
• Read & Edit Files: Open and save configuration files in the web editor.
• Create & Upload: Upload new mods, plugins, and create directories.
• Delete Files: Permanently remove files and directories.
• Archive & Extract: Compress selections into archives and unarchive .zip / .tar.gz packages.
• SFTP Access: Connect directly via external SFTP clients using personal credentials.

Backups & Snapshots

• View Backups: Inspect existing snapshot list, timestamps, and sizes.
• Create Backups: Trigger manual snapshots on demand.
• Restore Backups: Perform one-click disaster recovery over the live container.
• Download Backups: Download backup archives to local machines.
• Delete Backups: Purge older snapshots to reclaim allocated backup quota.

Schedules & Automation

• View Schedules: Review active maintenance routines and cron timers.
• Manage Schedules: Create, edit, and toggle automated tasks.

Databases & Network

• View Databases: Access connection parameters and generated credentials.
• Create & Rotate: Provision new databases or rotate access tokens.
• Manage Allocations: Reassign primary and secondary listening ports.

---

Editing or Revoking Access

1. Return to the Users tab on your server dashboard.
2. Click the edit icon next to any active subuser to adjust their permission flags in real time.
3. Click the delete icon to revoke all server access instantly. All active SFTP sessions and panel authorizations for that user are terminated immediately.