Administrator: what it grants and why it cannot be scoped down

What the bit actually does

Administrator is bit 3 of the permissions bitfield, decimal value 8. Discord documents it as "Allows all permissions and bypasses channel permission overwrites".

Both halves matter. The first means every other bit is implied: an app with Administrator has Manage Roles, Ban Members, Manage Webhooks and everything else, whether or not those bits are set in the install link. The second means per-channel restrictions do not apply. You cannot hide a private channel from an app that holds Administrator by denying it View Channel there.

The practical consequence is that an install link requesting permissions=8 and an install link requesting every documented bit are the same grant. The catalog shows both as Administrator for that reason.

What it does not grant

Administrator is not ownership. An app holding it cannot delete the server or transfer ownership, and it is still bounded by role hierarchy for actions against members: it cannot ban someone whose highest role sits above the app's own.

It also does not grant message content. Reading what people type is governed by the Message Content privileged intent, which is a separate mechanism on the application itself. An app can hold Administrator and still receive empty message bodies.

When an app legitimately needs it

Some jobs genuinely require it. A backup and restore tool has to recreate channels, roles and overwrites, which is close to the full permission set anyway. An anti-nuke tool has to be able to act against a compromised moderator, which means outranking one.

The question worth asking is not whether the app requests Administrator, but whether its job explains the request. A music player asking for Administrator and nothing else does not have that explanation.

What to do instead

Decode the install link before accepting it. If the app publishes install parameters, the catalog shows the decoded list on its profile; if it does not, paste the authorize URL into the decoder below.

Where an alternative does the same job without Administrator, the comparison pages say so explicitly. That is the single most common real difference between otherwise similar apps.