Understand access
Read the request before you accept it
Learn what a Discord permission allows, then decode an install link to see what an app is asking for. The reference explains permissions and privileged intents with examples.
-
Administrator: what it grants and why it cannot be scoped down
Administrator is the only permission in Discord that cannot be narrowed. Granting it to an app is a decision about trust, not about configuration.
-
Manage Roles: role hierarchy is the only thing bounding it
Manage Roles looks narrow and is not. Its real boundary is where the app's own highest role sits in your hierarchy.
-
Manage Server: what it really covers
Manage Server is the settings permission, and settings include the invite list and the vanity URL - the two things that decide who can reach your community.
-
Message Content: a privileged intent, not a permission
Message Content is not on the install screen, is not in the permissions integer, and is the single biggest determinant of whether an app can read what your members write.