How to Set Up ACE Permissions on Your FiveM Server

This guide shows you how to set up ACE permissions on your FiveM server — for example, giving yourself and your staff admin powers. FiveM uses an ACE (Access Control Entry) system for permissions. You define groups (like admin, moderator), grant them permissions (aces), and assign players (principals) to groups using their identifiers (Steam, Discord, license, or FiveM ID).

Core Concepts

Set Up Permissions

Step 1 — Create a permissions file

Log in to the NolimitHost Game Panel at https://panel.nolimithost.cc/ and select your FiveM server. In the left sidebar, click Files. Create a file called permissions.cfg in the server root directory (the main folder that also contains server.cfg).

Step 2 — Define groups and permissions

Edit permissions.cfg and add your groups. Quick explanation of the commands: add_ace grants (allow) or denies (deny) a permission to a group, and add_principal makes one group inherit from another.

# Moderator permissions
add_ace group.moderator command.kick allow
add_ace group.moderator command.ban allow

# Admin inherits moderator + gets all commands
add_principal group.admin group.moderator
add_ace group.admin command allow
add_ace group.admin txadmin.menu allow

# Deny quit command even for admins
add_ace group.admin command.quit deny

Step 3 — Assign players to groups

Use their identifier (Steam, Discord, license, or FiveM):

# By Steam ID
add_principal identifier.steam:110000112345678 group.admin

# By Discord ID
add_principal identifier.discord:394446211341 group.moderator

# By FiveM license
add_principal identifier.license:abc123def456 group.moderator

Step 4 — Load in server.cfg

First, stop the server from the Console page, so the server doesn't overwrite your changes while you edit files. Open server.cfg and add:

exec permissions.cfg

Save the file when you're done.

Step 5 — Restart

Start the server again from the Console page. Permissions take effect on player connect — players (and you) may need to reconnect to pick up the new permissions.

How Inheritance Works

group.admin
  └── inherits from group.moderator
        └── inherits from builtin.everyone

When you run add_principal group.admin group.moderator, admins get all moderator permissions plus their own. builtin.everyone is the implicit parent of all principals.

Common Permission Examples

# Allow a group to use a specific resource
add_ace group.admin myresource allow

# Allow a resource to run specific commands
add_ace resource.es_extended command.add_ace allow
add_ace resource.es_extended command.add_principal allow

# Check permissions in a script
add_ace group.vip myscript.vipfeature allow

Identifier Types

An identifier is the unique ID FiveM uses to recognize a player, depending on which account they linked to FiveM.