Enshrouded Server Roles and Reserved Slots
Enshrouded's newer permissions system is much better than the old one-password model, but it also trips up admins who still think the top-level "password" field is the main gate. For dedicated servers, role passwords in userGroups are now the real control surface.
Critical change: Keen's November 10, 2025 roles article says the legacy top-level "password" line is no longer how dedicated-server access is meant to be managed. If Enshrouded sees an old password there, it creates a fallback default group to preserve older behavior.
Default Role Logic
| Role | Base Editing | Inventories | Kick / Ban |
|---|---|---|---|
| Admin | Yes | Yes | Yes |
| Friend | Yes | Yes | No |
| Guest | No | No | No |
| Visitor | No | No | No |
What Reserved Slots Actually Do
"reservedSlots": 1 on a user group keeps space available for that role even when the server appears full to lower-priority groups. This is the clean way to guarantee Admin or Friend access without permanently lowering your public slot count.
"userGroups": [
{
"name": "Admin",
"password": "AdminSecret",
"canKickBan": true,
"canAccessInventories": true,
"canEditBase": true,
"canExtendBase": true,
"reservedSlots": 1
},
{
"name": "Friend",
"password": "FriendSecret",
"canKickBan": false,
"canAccessInventories": true,
"canEditBase": true,
"canExtendBase": true,
"reservedSlots": 2
}
]Good Permission Design for Real Communities
- Admin: only for people you trust with bans and altar changes.
- Friend: regular group members who should build and use storage freely.
- Guest: trial players who can adventure but should not strip the base.
- Visitor: showcase or event access with minimal damage potential.
Mistakes That Create Security Holes
| Mistake | Why It Is Bad |
|---|---|
| Leaving a role enabled with no password | Keen warns that players can then join with that permission level freely. |
| Using one password for everybody | You lose moderation separation and cannot reserve slots intelligently. |
| Giving builders full admin out of convenience | Turns ordinary social drama into ban or altar-destruction risk. |
If your group cannot get in because the server looks full, check reserved slots first. If the browser cannot find the server at all, move to Server Browser and Favorites.
Want cleaner role management than manually sharing JSON passwords in chat? Host your Enshrouded server with Supercraft and keep permissions, slots, and backups in one place.