Permissions Toscio needs

Updated 18 October 2026

Toscio asks for seven permissions when you add it, and nothing else. This page explains what each one is for, the one optional permission for ban appeals, the rule about role order that trips up most servers, and how to check channel permissions.

The seven permissions

Permission Why Toscio needs it
View Channels To see the channels where it posts the panel and the staff cards.
Send Messages To post the Apply panel and the application cards for your staff.
Embed Links To show panels and cards as clean, readable messages (embeds).
Attach Files To put the files applicants send (screenshots, documents) on the staff card.
Manage Roles To give the role you chose when an application is accepted, and remove roles if you set some.
Create Private Threads To open a private interview thread with an applicant.
Send Messages in Threads To post in those interview threads.

These are pre-checked when you click Add to Discord on toscio.com. If you unchecked one, the easiest fix is to add the bot again with the same link: Discord updates the permissions of the Toscio role.

Why Toscio never asks for Administrator

Administrator gives a bot every permission on your server, including deleting channels and banning members. Toscio doesn't need any of that, so it doesn't ask. Toscio also doesn't read your messages: it only receives the commands, button clicks and forms that members send to it.

Optional: Ban Members, for ban appeals only

If you use ban appeals, you can give Toscio's role the Ban Members permission. It's optional and Toscio doesn't ask for it when you add the bot: you only add it if you want ban appeals to be fully automatic. With it, Toscio:

  • checks that the person appealing is really banned (others get "You are not banned from this server: there is nothing to appeal.") and shows the ban reason on the staff card;
  • lifts the ban automatically when you accept the appeal: "🔓 Ban lifted."

Without it, appeals still work: the card says "Ban not checked: give the bot the “Ban Members” permission to check it and lift it automatically.", and on acceptance it reminds you to lift the ban yourself.

To add it: Server Settings → Roles → Toscio, turn on Ban Members, save. Toscio never bans anyone: it only reads bans and lifts the one you accepted.

The role order rule

Discord only lets a bot give or remove roles that are below its highest role. It's a Discord rule, and no permission (not even Administrator) bypasses it.

To fix it:

  1. Open Server Settings → Roles.
  2. Drag the Toscio role above every role it should give or remove on acceptance.
  3. Save.

Toscio checks this for you:

  • /toscio setup warns you: "The @role role is above the bot's role. In Server Settings → Roles, drag the bot's role above it, otherwise it cannot give it."
  • In the dashboard's form editor, roles above Toscio are greyed out with "— above the bot’s role".
  • If it still happens when a staff member clicks Accept, the application stays pending and the card shows: "Could not give the role: in Server Settings → Roles, move the bot's role above the role to give, then try again."

Roles managed by Discord or other bots (booster role, bot roles) can't be given by anyone, so Toscio refuses them.

Channel permissions

Server-wide permissions can be overridden in each channel. If a channel is private or has custom permissions, check that Toscio (or its role) is allowed there.

Panel channel (where members click Apply):

  • View Channel, Send Messages, Embed Links: to post the panel.
  • Create Private Threads, Send Messages in Threads: for interviews, which are opened as private threads in this channel. Your applicants can always see this channel, which is why interviews happen here and not in the staff channel.

Staff channel (where applications arrive):

  • View Channel, Send Messages, Embed Links: to post each application card.
  • Attach Files, if your form has file questions: files are attached to the card. Servers that added Toscio before October 2026 may not have given it: without it, applications still arrive, with a note instead of the files.

To check: right-click the channel → Edit Channel → Permissions, then add the Toscio role if needed and allow these permissions.

Interviews need a regular text channel for the panel. Discord doesn't allow private threads in announcement channels.

Pinging your staff role

On each new application, Toscio mentions the staff roles you chose. If the role isn't mentionable, Discord shows the mention but doesn't notify anyone. Turn on Allow anyone to @mention this role in the role settings, or give Toscio the "Mention @everyone, @here and All Roles" permission in the staff channel.

Who can do what

Action Who
Run /toscio setup, use the dashboard Members with Manage Server (and the owner)
Accept, decline, vote, open an interview Members with Manage Server, plus the staff roles of that form
Apply Anyone who can see the panel and meets the form's conditions
/toscio vote, /toscio privacy, /toscio help Everyone

A member without these rights who clicks a staff button gets: "Only staff members can review applications."

Next: Get started · Troubleshooting

Questions

Can I give Toscio Administrator to make things simpler?

You can, but you shouldn't. Toscio works fully with its seven permissions. Administrator would not even fix the role order rule: a bot can never give a role placed above its own.

Who can use the dashboard?

Anyone with the Manage Server permission (or the server owner) can log in at app.toscio.com and manage that server.

Does Toscio need Ban Members?

Only if you run ban appeals and want Toscio to check the ban and lift it on acceptance. It's optional, not requested when you add the bot, and you can give it later.