[{"data":1,"prerenderedAt":578},["ShallowReactive",2],{"navigation":3,"\u002Fsecurity\u002Faccess-control":246,"\u002Fsecurity\u002Faccess-control-surround":573},[4,30,61,96,136,171,196,226],{"title":5,"icon":6,"path":7,"stem":8,"children":9,"page":29},"Getting started","i-lucide-rocket","\u002Fgetting-started","1.getting-started",[10,15,20,25],{"title":11,"path":12,"stem":13,"icon":14},"Introduction","\u002Fgetting-started\u002Fintroduction","1.getting-started\u002F1.introduction","i-lucide-house",{"title":16,"path":17,"stem":18,"icon":19},"Add Clarify","\u002Fgetting-started\u002Fadd-clarify","1.getting-started\u002F2.add-clarify","i-lucide-bot",{"title":21,"path":22,"stem":23,"icon":24},"Dashboard tour","\u002Fgetting-started\u002Fdashboard-tour","1.getting-started\u002F3.dashboard-tour","i-lucide-compass",{"title":26,"path":27,"stem":28,"icon":6},"Quickstart","\u002Fgetting-started\u002Fquickstart","1.getting-started\u002F4.quickstart",false,{"title":31,"icon":32,"path":33,"stem":34,"children":35,"page":29},"Core concepts","i-lucide-lightbulb","\u002Fconcepts","2.concepts",[36,41,46,51,56],{"title":37,"path":38,"stem":39,"icon":40},"How Clarify works","\u002Fconcepts\u002Fhow-clarify-works","2.concepts\u002F1.how-clarify-works","i-lucide-git-compare-arrows",{"title":42,"path":43,"stem":44,"icon":45},"Tickets & delivery modes","\u002Fconcepts\u002Ftickets-and-modes","2.concepts\u002F2.tickets-and-modes","i-lucide-ticket",{"title":47,"path":48,"stem":49,"icon":50},"Categories & ticket fields","\u002Fconcepts\u002Fcategories-and-inputs","2.concepts\u002F3.categories-and-inputs","i-lucide-tags",{"title":52,"path":53,"stem":54,"icon":55},"Cards & placeholders","\u002Fconcepts\u002Fcards-and-placeholders","2.concepts\u002F4.cards-and-placeholders","i-lucide-layout-panel-left",{"title":57,"path":58,"stem":59,"icon":60},"Roles & permissions","\u002Fconcepts\u002Froles-and-permissions","2.concepts\u002F5.roles-and-permissions","i-lucide-user-cog",{"title":62,"icon":63,"path":64,"stem":65,"children":66,"page":29},"Configuration","i-lucide-sliders-horizontal","\u002Fconfiguration","3.configuration",[67,72,77,81,86,91],{"title":68,"path":69,"stem":70,"icon":71},"Onboarding","\u002Fconfiguration\u002Fonboarding","3.configuration\u002F1.onboarding","i-lucide-wand-sparkles",{"title":73,"path":74,"stem":75,"icon":76},"General settings","\u002Fconfiguration\u002Fgeneral-settings","3.configuration\u002F2.general-settings","i-lucide-settings",{"title":78,"path":79,"stem":80,"icon":50},"Categories","\u002Fconfiguration\u002Fcategories","3.configuration\u002F3.categories",{"title":82,"path":83,"stem":84,"icon":85},"Ticket inputs","\u002Fconfiguration\u002Fticket-inputs","3.configuration\u002F4.ticket-inputs","i-lucide-form-input",{"title":87,"path":88,"stem":89,"icon":90},"Panels","\u002Fconfiguration\u002Fpanels","3.configuration\u002F5.panels","i-lucide-panel-top",{"title":92,"path":93,"stem":94,"icon":95},"White label (your own bot)","\u002Fconfiguration\u002Fwhite-label","3.configuration\u002F6.white-label","i-lucide-badge-check",{"title":97,"icon":98,"path":99,"stem":100,"children":101,"page":29},"Modules","i-lucide-blocks","\u002Fmodules","4.modules",[102,106,111,116,121,126,131],{"title":103,"path":104,"stem":105,"icon":98},"Modules overview","\u002Fmodules\u002Foverview","4.modules\u002F1.overview",{"title":107,"path":108,"stem":109,"icon":110},"Transcripts","\u002Fmodules\u002Ftranscripts","4.modules\u002F2.transcripts","i-lucide-file-text",{"title":112,"path":113,"stem":114,"icon":115},"Feedback","\u002Fmodules\u002Ffeedback","4.modules\u002F3.feedback","i-lucide-star",{"title":117,"path":118,"stem":119,"icon":120},"Escalation","\u002Fmodules\u002Fescalation","4.modules\u002F4.escalation","i-lucide-siren",{"title":122,"path":123,"stem":124,"icon":125},"Opening hours","\u002Fmodules\u002Fopening-hours","4.modules\u002F5.opening-hours","i-lucide-clock",{"title":127,"path":128,"stem":129,"icon":130},"Webhooks","\u002Fmodules\u002Fwebhooks","4.modules\u002F6.webhooks","i-lucide-webhook",{"title":132,"path":133,"stem":134,"icon":135},"Assignment","\u002Fmodules\u002Fassignment","4.modules\u002F7.assignment","i-lucide-user-check",{"title":137,"icon":138,"path":139,"stem":140,"children":141,"page":29},"Integrations","i-lucide-plug","\u002Fintegrations","5.integrations",[142,146,151,156,161,166],{"title":143,"path":144,"stem":145,"icon":138},"Integrations overview","\u002Fintegrations\u002Foverview","5.integrations\u002F1.overview",{"title":147,"path":148,"stem":149,"icon":150},"Stripe","\u002Fintegrations\u002Fstripe","5.integrations\u002F2.stripe","i-simple-icons-stripe",{"title":152,"path":153,"stem":154,"icon":155},"PayPal","\u002Fintegrations\u002Fpaypal","5.integrations\u002F3.paypal","i-simple-icons-paypal",{"title":157,"path":158,"stem":159,"icon":160},"Tebex","\u002Fintegrations\u002Ftebex","5.integrations\u002F4.tebex","i-lucide-shopping-cart",{"title":162,"path":163,"stem":164,"icon":165},"Patreon","\u002Fintegrations\u002Fpatreon","5.integrations\u002F5.patreon","i-simple-icons-patreon",{"title":167,"path":168,"stem":169,"icon":170},"GitHub","\u002Fintegrations\u002Fgithub","5.integrations\u002F6.github","i-simple-icons-github",{"title":172,"icon":173,"path":174,"stem":175,"children":176,"page":29},"Data connectors","i-lucide-share-2","\u002Fdata-connectors","6.data-connectors",[177,181,186,191],{"title":178,"path":179,"stem":180,"icon":173},"Data connectors overview","\u002Fdata-connectors\u002Foverview","6.data-connectors\u002F1.overview",{"title":182,"path":183,"stem":184,"icon":185},"Build a connector","\u002Fdata-connectors\u002Fbuild-a-connector","6.data-connectors\u002F2.build-a-connector","i-lucide-wrench",{"title":187,"path":188,"stem":189,"icon":190},"Discord auto-detect","\u002Fdata-connectors\u002Fdiscord-auto-detect","6.data-connectors\u002F3.discord-auto-detect","i-lucide-scan-face",{"title":192,"path":193,"stem":194,"icon":195},"Connector security","\u002Fdata-connectors\u002Fsecurity","6.data-connectors\u002F4.security","i-lucide-shield",{"title":197,"icon":198,"path":199,"stem":200,"children":201,"page":29},"Security & trust","i-lucide-shield-check","\u002Fsecurity","7.security",[202,206,211,216,221],{"title":203,"path":204,"stem":205,"icon":198},"Security overview","\u002Fsecurity\u002Foverview","7.security\u002F1.overview",{"title":207,"path":208,"stem":209,"icon":210},"Encryption & secrets","\u002Fsecurity\u002Fencryption","7.security\u002F2.encryption","i-lucide-lock",{"title":212,"path":213,"stem":214,"icon":215},"The relay & your privacy","\u002Fsecurity\u002Fthe-middleman","7.security\u002F3.the-middleman","i-lucide-eye-off",{"title":217,"path":218,"stem":219,"icon":220},"Access & permissions","\u002Fsecurity\u002Faccess-control","7.security\u002F4.access-control","i-lucide-key-round",{"title":222,"path":223,"stem":224,"icon":225},"Data & retention","\u002Fsecurity\u002Fdata-and-retention","7.security\u002F5.data-and-retention","i-lucide-database",{"title":227,"icon":228,"path":229,"stem":230,"children":231,"page":29},"Reference","i-lucide-book-open","\u002Freference","8.reference",[232,237,241],{"title":233,"path":234,"stem":235,"icon":236},"FAQ","\u002Freference\u002Ffaq","8.reference\u002F1.faq","i-lucide-circle-help",{"title":238,"path":239,"stem":240,"icon":185},"Troubleshooting","\u002Freference\u002Ftroubleshooting","8.reference\u002F2.troubleshooting",{"title":242,"path":243,"stem":244,"icon":245},"Glossary","\u002Freference\u002Fglossary","8.reference\u002F3.glossary","i-lucide-book-a",{"id":247,"title":217,"body":248,"description":566,"extension":567,"links":568,"meta":569,"navigation":570,"path":218,"seo":571,"stem":219,"__hash__":572},"docs\u002F7.security\u002F4.access-control.md",{"type":249,"value":250,"toc":554},"minimark",[251,255,262,267,275,278,303,309,313,316,378,402,412,416,423,435,440,444,447,470,473,477,480,489,493,524,528],[252,253,254],"p",{},"Access to Clarify is deliberately narrow: only the right people can open your dashboard, and even then they only see what belongs to your server. This page explains how sign-in works, the admin levels your team can hold, and why removing someone takes effect straight away.",[252,256,257,258,261],{},"For the Discord-side roles that decide who counts as staff on a ticket, see ",[259,260,57],"a",{"href":58},".",[263,264,266],"h2",{"id":265},"signing-in-to-the-dashboard","Signing in to the dashboard",[252,268,269,270,274],{},"You sign in to the Clarify dashboard with ",[271,272,273],"strong",{},"Discord"," — there's no separate password to create or remember. Clarify only ever sees the Discord profile details you authorise (your id, username and email); it never sees your Discord password.",[252,276,277],{},"Once you're signed in:",[279,280,281,289,296],"ul",{},[282,283,284,285,288],"li",{},"Your session is kept in a ",[271,286,287],{},"secure, HttpOnly cookie",". That means the session can't be read by scripts running in the page — it's handled by the browser and sent only to Clarify.",[282,290,291,292,295],{},"The session uses a ",[271,293,294],{},"sliding expiry",": it stays valid while you're active and lapses after a period of inactivity, so an unattended tab doesn't stay open forever.",[282,297,298,299,302],{},"Every action that changes something (saving settings, connecting an integration, closing a ticket) is ",[271,300,301],{},"CSRF-protected",", so another site can't trick your browser into making changes on your behalf.",[304,305,306],"note",{},[252,307,308],{},"There's nothing to configure here — these protections are always on for every account.",[263,310,312],{"id":311},"admin-levels","Admin levels",[252,314,315],{},"What a person can do in the dashboard depends on their admin level for that server. There are three:",[317,318,319,335],"table",{},[320,321,322],"thead",{},[323,324,325,329,332],"tr",{},[326,327,328],"th",{},"Level",[326,330,331],{},"Who it's for",[326,333,334],{},"What they can do",[336,337,338,352,365],"tbody",{},[323,339,340,346,349],{},[341,342,343],"td",{},[271,344,345],{},"Member",[341,347,348],{},"Everyone else",[341,350,351],{},"No dashboard admin. They can still open and use their own tickets.",[323,353,354,359,362],{},[341,355,356],{},[271,357,358],{},"Helper",[341,360,361],{},"Support staff",[341,363,364],{},"Can assist with tickets and day-to-day support work.",[323,366,367,372,375],{},[341,368,369],{},[271,370,371],{},"Root",[341,373,374],{},"Server owners \u002F super-admins",[341,376,377],{},"Full access, including settings, integrations and any ticket on the server.",[379,380,381,392,397],"field-group",{},[382,383,385],"field",{"name":345,"type":384},"level",[252,386,387,388,391],{},"The default. No admin access to the dashboard. A member can only ever see and act on ",[271,389,390],{},"their own"," tickets.",[382,393,394],{"name":358,"type":384},[252,395,396],{},"Staff who assist on tickets. Grant this to your support team so they can help members without full owner-level control.",[382,398,399],{"name":371,"type":384},[252,400,401],{},"Super-admin. Reserved for server owners and trusted admins — Root can change any setting, connect integrations, and view every ticket on the server. Keep this list short.",[403,404,405],"tip",{},[252,406,407,408,411],{},"Give people the ",[271,409,410],{},"lowest level that lets them do their job",". Most support staff only need Helper.",[263,413,415],{"id":414},"access-is-checked-on-every-request","Access is checked on every request",[252,417,418,419,422],{},"Your admin list isn't cached and trusted for the rest of a session — Clarify ",[271,420,421],{},"re-checks it on every request",". The practical upshot:",[279,424,425,428],{},[282,426,427],{},"Add someone as Helper or Root and their access is live immediately.",[282,429,430,431,434],{},"Remove someone and their access is ",[271,432,433],{},"revoked instantly",", even if they still have a dashboard tab open. Their next action simply won't go through.",[403,436,437],{},[252,438,439],{},"This makes off-boarding simple: remove the person from your admin list and you're done. There's no session to hunt down or \"sign out everywhere\" button to press.",[263,441,443],{"id":442},"everything-is-scoped-per-server","Everything is scoped per server",[252,445,446],{},"Clarify treats each Discord server as its own island. There is no shared or cross-server view.",[279,448,449,459,467],{},[282,450,451,452,455,456,458],{},"A ",[271,453,454],{},"member"," can only fetch ",[271,457,390],{}," tickets — never anyone else's, and never tickets from another server.",[282,460,451,461,463,464,261],{},[271,462,371],{}," admin can see any ticket, but ",[271,465,466],{},"only on the servers they administer",[282,468,469],{},"Settings, integrations, connected payment accounts and stored data all belong to a single server. Connecting Stripe or a data connector for one server never exposes it to another.",[252,471,472],{},"So even if the same person helps out on two different servers, each server's dashboard shows only that server's tickets and settings.",[263,474,476],{"id":475},"how-clarify-talks-to-itself","How Clarify talks to itself",[252,478,479],{},"The Discord bot and the Clarify dashboard\u002FAPI are separate parts of the product, and they only trust each other through a private, signed channel that customers never touch or configure. You don't set anything up for this — it's mentioned only so you know the bot can't be impersonated to pull your data.",[304,481,482],{},[252,483,484,485,488],{},"The internal keys and service credentials that make all of this work are ",[271,486,487],{},"operated by Clarify"," — they're never something you create, paste in or manage.",[263,490,492],{"id":491},"frequently-asked-questions","Frequently asked questions",[494,495,496,503,512,518],"accordion",{},[497,498,500],"accordion-item",{"label":499},"Someone left our team. How do I cut off their access?",[252,501,502],{},"Remove them from your admin list. Because access is re-checked on every request, their dashboard access stops immediately — there's nothing else to do.",[497,504,506],{"label":505},"Can a support helper see every ticket?",[252,507,508,509,511],{},"Helpers assist with support work, but ordinary members only ever see their own tickets. Full visibility of every ticket on the server is a ",[271,510,371],{}," capability.",[497,513,515],{"label":514},"Does signing in with Discord give Clarify my password?",[252,516,517],{},"No. Discord handles the login and only shares the profile details you authorise (id, username, email). Clarify never sees your Discord password.",[497,519,521],{"label":520},"Can someone on another server see our tickets?",[252,522,523],{},"No. Every ticket, setting and connected account is scoped to a single server. There's no cross-server access.",[263,525,527],{"id":526},"related","Related",[529,530,531,538,543,549],"card-group",{},[532,533,535],"card",{"icon":534,"title":57,"to":58},"i-lucide-users",[252,536,537],{},"How Discord roles decide who counts as staff on a ticket.",[532,539,540],{"icon":198,"title":203,"to":204},[252,541,542],{},"The full picture of how Clarify protects your server and data.",[532,544,546],{"icon":210,"title":545,"to":208},"Encryption at rest",[252,547,548],{},"How your connected keys and secrets are encrypted and never shown back.",[532,550,551],{"icon":225,"title":222,"to":223},[252,552,553],{},"What Clarify stores, what leaves Discord, and how long it's kept.",{"title":555,"searchDepth":556,"depth":557,"links":558},"",1,2,[559,560,561,562,563,564,565],{"id":265,"depth":557,"text":266},{"id":311,"depth":557,"text":312},{"id":414,"depth":557,"text":415},{"id":442,"depth":557,"text":443},{"id":475,"depth":557,"text":476},{"id":491,"depth":557,"text":492},{"id":526,"depth":557,"text":527},"Who can sign in to the Clarify dashboard, what each admin level can do, and how access is scoped and revoked per server.","md",null,{},{"icon":220},{"title":217,"description":566},"YMFfYxLiRaMAjGK9cT6y_pYsyrp0-LkbGfMxM0wN3O8",[574,576],{"title":212,"path":213,"stem":214,"description":575,"icon":215,"children":-1},"Who sees what when Clarify relays a ticket — staff stay anonymous in the forum, personal DMs stay private, and members see who helped.",{"title":222,"path":223,"stem":224,"description":577,"icon":225,"children":-1},"What Clarify stores, what leaves Discord, and how long transcripts are kept — plus how to delete a server or reset your setup.",1792666273602]