# Enum.SecurityCapability

Roblox Engine API enum from Roblox Studio 0.744.0.7441077 (version-7aaa6838d36c4448).

- HTML page: https://rapi.sleaze.dev/enums/SecurityCapability/
- Roblox documentation: https://create.roblox.com/docs/reference/engine/enums/SecurityCapability

Identifies a specific permission capability that a sandboxed script container may grant or restrict.

## Items

| Name | Value | Description |
| --- | --- | --- |
| `RunClientScript` | 0 | Indicates that a script container is permitted to execute scripts on the client ([`LocalScript`](https://rapi.sleaze.dev/classes/LocalScript.md)). |
| `RunServerScript` | 1 | Indicates that a script container is permitted to execute scripts on the server ([`Script`](https://rapi.sleaze.dev/classes/Script.md)). |
| `AccessOutsideWrite` | 2 | Grants a script read-write access to instances that live outside its sandboxed container. |
| `AssetRequire` | 3 | Deprecated. **Deprecated:** Use `SecurityCapability.LoadUnownedAsset` instead. Deprecated. Use `SecurityCapability.LoadUnownedAsset` instead. |
| `LoadString` | 4 | Allows a script to use the `loadstring()` Luau built-in to compile and execute a string as code. |
| `ScriptGlobals` | 5 | Allows a script to access the `shared` and `_G` shared global variable tables. |
| `CreateInstances` | 6 | Allows a script to create new [`Instance`](https://rapi.sleaze.dev/classes/Instance.md) objects using `new()`. |
| `Basic` | 7 | Guards access to a broad set of general-purpose engine APIs that do not belong to a more specific capability category. |
| `Audio` | 8 | Guards access to audio engine APIs such as [`Sound`](https://rapi.sleaze.dev/classes/Sound.md), [`AudioPlayer`](https://rapi.sleaze.dev/classes/AudioPlayer.md), and related classes. |
| `DataStore` | 9 | Guards access to data store APIs such as [`DataStoreService`](https://rapi.sleaze.dev/classes/DataStoreService.md) and its associated objects. |
| `Network` | 10 | Guards access to low-level networking APIs such as [`HttpService`](https://rapi.sleaze.dev/classes/HttpService.md). |
| `Physics` | 11 | Guards access to physics engine APIs such as [`Constraint`](https://rapi.sleaze.dev/classes/Constraint.md) classes and [`BasePart`](https://rapi.sleaze.dev/classes/BasePart.md) physics properties. |
| `UI` | 12 | Guards access to UI engine APIs such as [`ScreenGui`](https://rapi.sleaze.dev/classes/ScreenGui.md), [`Frame`](https://rapi.sleaze.dev/classes/Frame.md), and other [`GuiObject`](https://rapi.sleaze.dev/classes/GuiObject.md) classes. |
| `CSG` | 13 | Guards access to Constructive Solid Geometry (CSG) APIs such as [`UnionOperation`](https://rapi.sleaze.dev/classes/UnionOperation.md) and [`NegateOperation`](https://rapi.sleaze.dev/classes/NegateOperation.md). |
| `Chat` | 14 | Guards access to chat engine APIs such as [`TextChatService`](https://rapi.sleaze.dev/classes/TextChatService.md) and related chat classes. |
| `Animation` | 15 | Guards access to animation engine APIs such as [`AnimationController`](https://rapi.sleaze.dev/classes/AnimationController.md) and related classes. |
| `Avatar` | 16 | Deprecated. **Deprecated:** Use `SecurityCapability.AvatarAppearance` instead. Deprecated. Use `SecurityCapability.AvatarAppearance` instead. |
| `Input` | 17 | Guards access to user input APIs such as [`UserInputService`](https://rapi.sleaze.dev/classes/UserInputService.md) and [`ContextActionService`](https://rapi.sleaze.dev/classes/ContextActionService.md). |
| `Environment` | 18 | Guards access to environment and world-setting APIs such as [`Lighting`](https://rapi.sleaze.dev/classes/Lighting.md) and [`Atmosphere`](https://rapi.sleaze.dev/classes/Atmosphere.md). |
| `RemoteEvent` | 19 | Guards access to remote event and function APIs such as [`RemoteEvent`](https://rapi.sleaze.dev/classes/RemoteEvent.md) and [`RemoteFunction`](https://rapi.sleaze.dev/classes/RemoteFunction.md). |
| `LegacySound` | 20 | Guards access to the legacy [`Sound`](https://rapi.sleaze.dev/classes/Sound.md) and pre-[`VoiceChatService.UseAudioApi`](https://rapi.sleaze.dev/classes/VoiceChatService.md) sound stack APIs. |
| `Players` | 21 | Guards access to [`Players`](https://rapi.sleaze.dev/classes/Players.md) service APIs that query or manage connected players. |
| `CapabilityControl` | 22 | Guards access to the `Capabilities` and `Sandboxed` properties that configure script sandboxing. |
| `Plugin` | 23 | Mirrors the legacy [`Plugin`](https://rapi.sleaze.dev/classes/Plugin.md) permission level, granting access to Studio plugin APIs. |
| `LocalUser` | 24 | Mirrors the legacy [`LocalUser`](https://rapi.sleaze.dev/enums/SecurityCapability.md) permission level, granting access to IDE-only and Studio-level APIs. |
| `WritePlayer` | 25 | Mirrors the legacy [`WritePlayer`](https://rapi.sleaze.dev/enums/SecurityCapability.md) permission level, granting the ability to modify player identity properties such as name and `UserId`. |
| `RobloxScript` | 26 | Mirrors the legacy [`RobloxScript`](https://rapi.sleaze.dev/enums/SecurityCapability.md) permission level, granting access to [`CoreScript`](https://rapi.sleaze.dev/classes/CoreScript.md) APIs. |
| `RobloxEngine` | 27 | Mirrors the legacy [`RobloxEngine`](https://rapi.sleaze.dev/enums/SecurityCapability.md) permission level, granting access to internal engine-level APIs. |
| `Unassigned` | 28 | The default capability assigned to API members that have not been explicitly assigned to any other capability category. |
| `InternalTest` | 29 | Restricts access to non-sensitive APIs that are intentionally kept internal. |
| `PluginOrOpenCloud` | 30 | Restricts access to APIs callable only from Studio plugin or Open Cloud Luau execution sessions. |
| `Assistant` | 31 | Restricts access to APIs that may only be called from Studio Assistant execution contexts. |
| `RemoteCommand` | 32 | Restricts access to APIs that are executable only from Studio's [`RemoteCommandService`](https://rapi.sleaze.dev/classes/RemoteCommandService.md) in Team Create sessions. |
| `AssetRead` | 33 | Guards access to APIs that read or query asset metadata from the Roblox catalog. |
| `AssetManagement` | 34 | Guards access to asset management APIs such as [`ContentProvider:PreloadAsync()`](https://rapi.sleaze.dev/classes/ContentProvider.md) and encryption-key registration. |
| `DynamicGeneration` | 35 | Guards access to procedural and AI-driven content generation APIs such as [`EditableMesh`](https://rapi.sleaze.dev/classes/EditableMesh.md) and [`AvatarCreationService`](https://rapi.sleaze.dev/classes/AvatarCreationService.md). |
| `PlatformAvatarEditing` | 36 | Guards access to platform-level avatar editing APIs provided by [`AvatarEditorService`](https://rapi.sleaze.dev/classes/AvatarEditorService.md). |
| `AssetCreateUpdate` | 37 | Guards access to APIs that create or update published Roblox assets. |
| `Capture` | 38 | Guards access to [`CaptureService`](https://rapi.sleaze.dev/classes/CaptureService.md) APIs that take screenshots and record video. |
| `SensitiveInput` | 39 | Guards access to sensitive user input APIs such as those that can read raw keyboard or mouse data beyond normal game input. |
| `Monetization` | 40 | Guards access to in-experience purchase and monetization APIs such as [`MarketplaceService`](https://rapi.sleaze.dev/classes/MarketplaceService.md). |
| `LoadOwnedAsset` | 41 | Allows a script to load assets that are owned by the experience's creator using [`InsertService`](https://rapi.sleaze.dev/classes/InsertService.md) or `require()`. |
| `Social` | 42 | Guards access to social APIs such as [`SocialService`](https://rapi.sleaze.dev/classes/SocialService.md), [`FriendPages`](https://rapi.sleaze.dev/classes/FriendPages.md), and [`ExperienceInviteOptions`](https://rapi.sleaze.dev/classes/ExperienceInviteOptions.md). |
| `ServerCommunication` | 43 | Guards access to server-to-server messaging APIs such as [`MessagingService`](https://rapi.sleaze.dev/classes/MessagingService.md). |
| `Logging` | 44 | Guards access to [`LogService`](https://rapi.sleaze.dev/classes/LogService.md) and logging-related APIs. |
| `PromptExternalPurchase` | 45 | Guards access to APIs that initiate external (non-Roblox) purchase prompts. |
| `Groups` | 46 | Guards access to group-related APIs such as [`GroupService`](https://rapi.sleaze.dev/classes/GroupService.md). |
| `Teleport` | 47 | Guards access to teleportation APIs such as [`TeleportService`](https://rapi.sleaze.dev/classes/TeleportService.md), [`TeleportOptions`](https://rapi.sleaze.dev/classes/TeleportOptions.md), and [`TeleportAsyncResult`](https://rapi.sleaze.dev/classes/TeleportAsyncResult.md). |
| `Consequences` | 48 | Guards access to moderation and player-consequence APIs such as [`Players:BanAsync()`](https://rapi.sleaze.dev/classes/Players.md) and [`ModerationService`](https://rapi.sleaze.dev/classes/ModerationService.md). |
| `Material` | 49 | Guards access to [`MaterialService`](https://rapi.sleaze.dev/classes/MaterialService.md), [`MaterialVariant`](https://rapi.sleaze.dev/classes/MaterialVariant.md), and custom material APIs. |
| `AvatarBehavior` | 50 | Guards access to APIs that control avatar locomotion and behavior at runtime. |
| `AvatarAppearance` | 51 | Guards access to APIs that read or modify avatar appearance, such as [`HumanoidDescription`](https://rapi.sleaze.dev/classes/HumanoidDescription.md). |
| `LoadUnownedAsset` | 52 | Allows a script to `require()` asset IDs or call [`InsertService:LoadAsset()`](https://rapi.sleaze.dev/classes/InsertService.md) for assets not owned by the creator. |