Never share your own login. Anyone with it can reach your billing email and every server on your account. Add them as a user on the one server instead.
Add a user
- Open Users on the server and press New User.
- Enter their email address.
- Tick what they may do (see below), then save.
If they have never used SnowServers, an account is made for them and they get an email to set a password. They sign in at panel.snowservers.com and see your server in their list.
They do not get access to your billing or your other servers.
Picking permissions
Give the least that lets them do the job. Some sensible sets:
- Someone who restarts the bot when it misbehaves: Control: console, start, stop, restart.
- A co-developer who uploads code: the above, plus File: read, create, update, delete and SFTP, plus Startup: read.
- Somebody you trust completely: everything. That includes changing the token and restoring backups.
Two to think about before ticking:
- Startup: read shows the variables, and your bot token is one of them.
- File: read content lets them open any file, including a
.envwith your other secrets.
Removing someone
Users page, the delete button beside their name. It takes effect straight away. If they could see your token, reset it in the Discord Developer Portal and paste the new one into Startup.
Seeing what they did
The Activity page records actions by every user on the server, with their name.
Something here wrong or out of date? Tell us and it gets fixed.