Skip to content
Roblox API Reference

Enum.SecurityCapability

Identifies a specific permission capability that a sandboxed script container may grant or restrict.
Items
53
Uses
0

Items53

  • Enum.SecurityCapability.RunClientScript = 0
    Indicates that a script container is permitted to execute scripts on the client (LocalScript).
  • Enum.SecurityCapability.RunServerScript = 1
    Indicates that a script container is permitted to execute scripts on the server (Script).
  • Enum.SecurityCapability.AccessOutsideWrite = 2
    Grants a script read-write access to instances that live outside its sandboxed container.
  • Enum.SecurityCapability.AssetRequire = 3
    Deprecated: Use SecurityCapability.LoadUnownedAsset instead.
    Deprecated. Use SecurityCapability.LoadUnownedAsset instead.
    • Deprecated
  • Enum.SecurityCapability.LoadString = 4
    Allows a script to use the loadstring() Luau built-in to compile and execute a string as code.
  • Enum.SecurityCapability.ScriptGlobals = 5
    Allows a script to access the shared and _G shared global variable tables.
  • Enum.SecurityCapability.CreateInstances = 6
    Allows a script to create new Instance objects using new().
  • Enum.SecurityCapability.Basic = 7
    Guards access to a broad set of general-purpose engine APIs that do not belong to a more specific capability category.
  • Enum.SecurityCapability.Audio = 8
    Guards access to audio engine APIs such as Sound, AudioPlayer, and related classes.
  • Enum.SecurityCapability.DataStore = 9
    Guards access to data store APIs such as DataStoreService and its associated objects.
  • Enum.SecurityCapability.Network = 10
    Guards access to low-level networking APIs such as HttpService.
  • Enum.SecurityCapability.Physics = 11
    Guards access to physics engine APIs such as Constraint classes and BasePart physics properties.
  • Enum.SecurityCapability.UI = 12
    Guards access to UI engine APIs such as ScreenGui, Frame, and other GuiObject classes.
  • Enum.SecurityCapability.CSG = 13
    Guards access to Constructive Solid Geometry (CSG) APIs such as UnionOperation and NegateOperation.
  • Enum.SecurityCapability.Chat = 14
    Guards access to chat engine APIs such as TextChatService and related chat classes.
  • Enum.SecurityCapability.Animation = 15
    Guards access to animation engine APIs such as AnimationController and related classes.
  • Enum.SecurityCapability.Avatar = 16
    Deprecated: Use SecurityCapability.AvatarAppearance instead.
    Deprecated. Use SecurityCapability.AvatarAppearance instead.
    • Deprecated
  • Enum.SecurityCapability.Input = 17
    Guards access to user input APIs such as UserInputService and ContextActionService.
  • Enum.SecurityCapability.Environment = 18
    Guards access to environment and world-setting APIs such as Lighting and Atmosphere.
  • Enum.SecurityCapability.RemoteEvent = 19
    Guards access to remote event and function APIs such as RemoteEvent and RemoteFunction.
  • Enum.SecurityCapability.LegacySound = 20
    Guards access to the legacy Sound and pre-VoiceChatService.UseAudioApi sound stack APIs.
  • Enum.SecurityCapability.Players = 21
    Guards access to Players service APIs that query or manage connected players.
  • Enum.SecurityCapability.CapabilityControl = 22
    Guards access to the Capabilities and Sandboxed properties that configure script sandboxing.
  • Enum.SecurityCapability.Plugin = 23
    Mirrors the legacy Plugin permission level, granting access to Studio plugin APIs.
  • Enum.SecurityCapability.LocalUser = 24
    Mirrors the legacy LocalUser permission level, granting access to IDE-only and Studio-level APIs.
  • Enum.SecurityCapability.WritePlayer = 25
    Mirrors the legacy WritePlayer permission level, granting the ability to modify player identity properties such as name and UserId.
  • Enum.SecurityCapability.RobloxScript = 26
    Mirrors the legacy RobloxScript permission level, granting access to CoreScript APIs.
  • Enum.SecurityCapability.RobloxEngine = 27
    Mirrors the legacy RobloxEngine permission level, granting access to internal engine-level APIs.
  • Enum.SecurityCapability.Unassigned = 28
    The default capability assigned to API members that have not been explicitly assigned to any other capability category.
  • Enum.SecurityCapability.InternalTest = 29
    Restricts access to non-sensitive APIs that are intentionally kept internal.
  • Enum.SecurityCapability.PluginOrOpenCloud = 30
    Restricts access to APIs callable only from Studio plugin or Open Cloud Luau execution sessions.
  • Enum.SecurityCapability.Assistant = 31
    Restricts access to APIs that may only be called from Studio Assistant execution contexts.
  • Enum.SecurityCapability.RemoteCommand = 32
    Restricts access to APIs that are executable only from Studio's RemoteCommandService in Team Create sessions.
  • Enum.SecurityCapability.AssetRead = 33
    Guards access to APIs that read or query asset metadata from the Roblox catalog.
  • Enum.SecurityCapability.AssetManagement = 34
    Guards access to asset management APIs such as ContentProvider:PreloadAsync() and encryption-key registration.
  • Enum.SecurityCapability.DynamicGeneration = 35
    Guards access to procedural and AI-driven content generation APIs such as EditableMesh and AvatarCreationService.
  • Enum.SecurityCapability.PlatformAvatarEditing = 36
    Guards access to platform-level avatar editing APIs provided by AvatarEditorService.
  • Enum.SecurityCapability.AssetCreateUpdate = 37
    Guards access to APIs that create or update published Roblox assets.
  • Enum.SecurityCapability.Capture = 38
    Guards access to CaptureService APIs that take screenshots and record video.
  • Enum.SecurityCapability.SensitiveInput = 39
    Guards access to sensitive user input APIs such as those that can read raw keyboard or mouse data beyond normal game input.
  • Enum.SecurityCapability.Monetization = 40
    Guards access to in-experience purchase and monetization APIs such as MarketplaceService.
  • Enum.SecurityCapability.LoadOwnedAsset = 41
    Allows a script to load assets that are owned by the experience's creator using InsertService or require().
  • Enum.SecurityCapability.Social = 42
    Guards access to social APIs such as SocialService, FriendPages, and ExperienceInviteOptions.
  • Enum.SecurityCapability.ServerCommunication = 43
    Guards access to server-to-server messaging APIs such as MessagingService.
  • Enum.SecurityCapability.Logging = 44
    Guards access to LogService and logging-related APIs.
  • Enum.SecurityCapability.PromptExternalPurchase = 45
    Guards access to APIs that initiate external (non-Roblox) purchase prompts.
  • Enum.SecurityCapability.Groups = 46
    Guards access to group-related APIs such as GroupService.
  • Enum.SecurityCapability.Teleport = 47
    Guards access to teleportation APIs such as TeleportService, TeleportOptions, and TeleportAsyncResult.
  • Enum.SecurityCapability.Consequences = 48
    Guards access to moderation and player-consequence APIs such as Players:BanAsync() and ModerationService.
  • Enum.SecurityCapability.Material = 49
    Guards access to MaterialService, MaterialVariant, and custom material APIs.
  • Enum.SecurityCapability.AvatarBehavior = 50
    Guards access to APIs that control avatar locomotion and behavior at runtime.
  • Enum.SecurityCapability.AvatarAppearance = 51
    Guards access to APIs that read or modify avatar appearance, such as HumanoidDescription.
  • Enum.SecurityCapability.LoadUnownedAsset = 52
    Allows a script to require() asset IDs or call InsertService:LoadAsset() for assets not owned by the creator.

No class members use Enum.SecurityCapability.