Skip to content

SecurityCapability

Not yet Enum

Identifies a specific permission capability that a sandboxed script container may grant or restrict.

Not implemented in Nova

This enum is missing from Nova. Scripts that reference it will fail.

Description

SecurityCapability is a bitmask-based permission system that controls which engine APIs and Luau language features are accessible to scripts running inside sandboxed containers. Each value represents one capability bit that can be granted or restricted.

When an Instance has its Sandboxed property enabled, the engine intersects the capabilities of all ancestor containers to determine the effective permission set of any script that executes within that container. API members, classes, and Luau built-ins are each annotated with one or more SecurityCapability values; a script's thread must hold every required capability to call them.

Items

Item Value Status Notes
RunClientScript 0 Not yet Indicates that a script container is permitted to execute scripts on the client (LocalScript).
RunServerScript 1 Not yet Indicates that a script container is permitted to execute scripts on the server (Script).
AccessOutsideWrite 2 Not yet Grants a script read-write access to instances that live outside its sandboxed container.
AssetRequire 3 Not yet Deprecated. Use SecurityCapability.LoadUnownedAsset instead.
LoadString 4 Not yet Allows a script to use the loadstring() Luau built-in to compile and execute a string as code.
ScriptGlobals 5 Not yet Allows a script to access the shared and _G shared global variable tables.
CreateInstances 6 Not yet Allows a script to create new Instance objects using Instance.new().
Basic 7 Not yet Guards access to a broad set of general-purpose engine APIs that do not belong to a more specific capability category.
Audio 8 Not yet Guards access to audio engine APIs such as Sound, AudioPlayer, and related classes.
DataStore 9 Not yet Guards access to data store APIs such as DataStoreService and its associated objects.
Network 10 Not yet Guards access to low-level networking APIs such as HttpService.
Physics 11 Not yet Guards access to physics engine APIs such as Constraint classes and BasePart physics properties.
UI 12 Not yet Guards access to UI engine APIs such as ScreenGui, Frame, and other GuiObject classes.
CSG 13 Not yet Guards access to Constructive Solid Geometry (CSG) APIs such as UnionOperation and NegateOperation.
Chat 14 Not yet Guards access to chat engine APIs such as TextChatService and related chat classes.
Animation 15 Not yet Guards access to animation engine APIs such as AnimationController and related classes.
Avatar 16 Not yet Deprecated. Use SecurityCapability.AvatarAppearance instead.
Input 17 Not yet Guards access to user input APIs such as UserInputService and ContextActionService.
Environment 18 Not yet Guards access to environment and world-setting APIs such as Lighting and Atmosphere.
RemoteEvent 19 Not yet Guards access to remote event and function APIs such as RemoteEvent and RemoteFunction.
LegacySound 20 Not yet Guards access to the legacy Sound and pre-VoiceChatService.UseAudioApi sound stack APIs.
Players 21 Not yet Guards access to Players service APIs that query or manage connected players.
CapabilityControl 22 Not yet Guards access to the Instance.Capabilities and Instance.Sandboxed properties that configure script sandboxing.
Plugin 23 Not yet Mirrors the legacy Plugin permission level, granting access to Studio plugin APIs.
LocalUser 24 Not yet Mirrors the legacy LocalUser permission level, granting access to IDE-only and Studio-level APIs.
WritePlayer 25 Not yet Mirrors the legacy WritePlayer permission level, granting the ability to modify player identity properties such as name and UserId.
RobloxScript 26 Not yet Mirrors the legacy RobloxScript permission level, granting access to CoreScript APIs.
RobloxEngine 27 Not yet Mirrors the legacy RobloxEngine permission level, granting access to internal engine-level APIs.
Unassigned 28 Not yet The default capability assigned to API members that have not been explicitly assigned to any other capability category.
InternalTest 29 Not yet Restricts access to non-sensitive APIs that are intentionally kept internal.
PluginOrOpenCloud 30 Not yet Restricts access to APIs callable only from Studio plugin or Open Cloud Luau execution sessions.
Assistant 31 Not yet Restricts access to APIs that may only be called from Studio Assistant execution contexts.
RemoteCommand 32 Not yet Restricts access to APIs that are executable only from Studio's RemoteCommandService in Team Create sessions.
AssetRead 33 Not yet Guards access to APIs that read or query asset metadata from the Roblox catalog.
AssetManagement 34 Not yet Guards access to asset management APIs such as ContentProvider.PreloadAsync() and encryption-key registration.
DynamicGeneration 35 Not yet Guards access to procedural and AI-driven content generation APIs such as EditableMesh and AvatarCreationService.
PlatformAvatarEditing 36 Not yet Guards access to platform-level avatar editing APIs provided by AvatarEditorService.
AssetCreateUpdate 37 Not yet Guards access to APIs that create or update published Roblox assets.
Capture 38 Not yet Guards access to CaptureService APIs that take screenshots and record video.
SensitiveInput 39 Not yet Guards access to sensitive user input APIs such as those that can read raw keyboard or mouse data beyond normal game input.
Monetization 40 Not yet Guards access to in-experience purchase and monetization APIs such as MarketplaceService.
LoadOwnedAsset 41 Not yet Allows a script to load assets that are owned by the experience's creator using InsertService or Global.LuaGlobals.require().
Social 42 Not yet Guards access to social APIs such as SocialService, FriendPages, and ExperienceInviteOptions.
ServerCommunication 43 Not yet Guards access to server-to-server messaging APIs such as MessagingService.
Logging 44 Not yet Guards access to LogService and logging-related APIs.
PromptExternalPurchase 45 Not yet Guards access to APIs that initiate external (non-Roblox) purchase prompts.
Groups 46 Not yet Guards access to group-related APIs such as GroupService.
Teleport 47 Not yet Guards access to teleportation APIs such as TeleportService, TeleportOptions, and [TeleportAsyncResult](../classes/TeleportAsyncResul…
Consequences 48 Not yet Guards access to moderation and player-consequence APIs such as Players.BanAsync() and ModerationService.
Material 49 Not yet Guards access to MaterialService, MaterialVariant, and custom material APIs.
AvatarBehavior 50 Not yet Guards access to APIs that control avatar locomotion and behavior at runtime.
AvatarAppearance 51 Not yet Guards access to APIs that read or modify avatar appearance, such as HumanoidDescription.
LoadUnownedAsset 52 Not yet Allows a script to Global.LuaGlobals.require() asset IDs or call InsertService.LoadAsset() for assets not owned by the creator.

Roblox reference: SecurityCapability