RedM admin access is controlled by the ACE permission system inherited from FiveM. You grant permissions to a group with add_ace, then place a player’s identifier in that group with add_principal. Save those lines in server.cfg or a file that it loads, restart the server, and test an allowed command in game.
For a hosted RedM setup, Godlike.Host provides a game panel with SFTP/FTP access, up to three free backups a day with restore, and 24/7/365 support by live chat or ticket. It is not on Cfx.re’s list of authorized RedM hosts (redm.net, 10 Oct 2026).
As an Amazon Associate I earn from qualifying purchases.
The reliable pattern is group.admin for the group, a license identifier for each administrator, and explicit permissions for commands or resources they must manage. txAdmin can provide a web-based administration route, while framework roles such as VORP or RSG remain separate from ACE.
How RedM admin permissions work
RedM does not make someone an administrator merely because their character name, Rockstar name, or display name appears in a configuration file. ACE (Access Control Entries) evaluates two relationships:
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
- Permissions: an ACE rule gives a principal, usually a group, permission to run a command or access a resource.
- Membership: a principal rule places a player’s identifier into that group.
In practical terms, add_ace group.admin command allow gives the admin group command access, and add_principal identifier.license:XXXXXXXX group.admin makes one player a member of that group. The identifier must include its prefix, such as identifier.license:; the value after the colon is replaced with the player’s real identifier.
ACE is independent of character jobs, framework permissions, and database roles. A player can be an ACE administrator but still lack a VORP or RSG job-specific role, or have a framework role without permission to run an ACE-protected server command.
Prepare before editing the server
Back up the configuration
Copy server.cfg and any existing permissions file before changing it. Keep the backup outside the live configuration directory or give it a dated name. A syntax mistake or an overly broad permission can then be reversed without rebuilding the server configuration.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Make sure you can restart safely
Changes stored in a file are read when the server starts, or when the affected resource is restarted. Lines typed only into the live console are not a permanent configuration and can disappear at the next restart. Schedule the change when players can tolerate a restart, and keep an existing console or txAdmin session open so you can see startup errors.
Collect an identifier, not a display name
Display names can change and can be duplicated. Obtain the target player’s identifier from the player’s page in txAdmin or from the identifiers shown by the server when that player connects. Copy the complete value, including its type prefix. A typo generally grants no access without producing an obvious error, so paste rather than retype it.
Add an administrator in server.cfg
The following is the conventional full-access pattern described by RedM community guides. Replace XXXXXXXX with the real license hash and preserve the prefixes and spacing.
add_ace group.admin command allow
add_ace group.admin command.quit deny
add_principal identifier.license:XXXXXXXX group.adminThe first line allows the group to use commands covered by the command principal. The second line denies the dangerous quit command even though the group has broad command access. The third line assigns one player to the group.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
Step-by-step
- Open the live server’s
server.cfgin a text editor. - Place the group ACE lines in the permissions section, preferably near other access-control entries so they are easy to audit.
- Append one
add_principalline for each administrator. - Save the file as plain text. Do not put the rules inside comments or add quotation marks around the identifier.
- Restart the RedM server. If your setup loads permissions through a resource, restart that resource as well.
- Join the server with the account represented by the identifier and run a harmless command that the group should allow.
- If the command is rejected, work through the troubleshooting section rather than adding broader permissions at random.
Add more than one administrator
Keep one shared group and add a separate principal line for every account:
add_principal identifier.license:FIRST_LICENSE_HASH group.admin
add_principal identifier.license:SECOND_LICENSE_HASH group.admin
add_principal identifier.license:THIRD_LICENSE_HASH group.adminDo not combine identifiers on one line. Each player needs a complete add_principal entry, and each value must use the prefix that matches the identifier type.
Keep permissions in a separate file
A dedicated permissions.cfg makes access rules easier to review when server.cfg already contains startup commands, endpoint settings, and resource declarations. Put the same ACE and principal lines in that file, then load it from server.cfg with an exec directive:
exec permissions.cfgThe permissions file must be in the location your server expects, or the exec line must contain its correct relative or absolute path. A perfectly written file has no effect if the server never loads it. After adding or changing the exec line, restart and watch the startup output; after later edits, restart again so the file is read.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Use one consistent format: group grants first, explicit denials next, and individual add_principal assignments after that. Comments identifying an administrator and the date of a change can help with maintenance, but never put a password or other secret in the file.
Choose and verify the identifier
The identifier after add_principal must match one of the values RedM reports for that player. The common choices are:
| Identifier | What it represents | Operational consideration |
|---|---|---|
license: |
Rockstar license hash | Reported as always present and the most commonly used choice; VORP’s administration system also uses the Rockstar license. |
steam: |
Hexadecimal Steam ID | Works only when the player is using the corresponding Steam identity. One community summary says a server steam_webApiKey is required; verify that requirement against the current platform documentation before relying on it. |
discord: |
Discord user ID | Available only when the player is using Discord alongside RedM. |
fivem: |
Cfx.re account ID | Useful when you want to tie access to the player’s Cfx.re identity. |
For most servers, start with the license: value because it is consistently available. If you intentionally use another identity, copy its complete prefix and value exactly. An entry such as identifier.license:ABC123 is different from identifier.steam:ABC123; ACE does not infer the type from the hash.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Find the value in txAdmin
- Open the txAdmin panel for the server.
- Use the default panel address format
http://your-server-ip:40120if your installation has not been assigned another address. - Open the player’s page and inspect the list of identifiers.
- Copy the complete license, Steam, Discord, or Cfx.re value, then use the matching prefix in
add_principal.
Find the value from server output
When a player connects, the server can display the identifiers associated with that connection. Copy the exact type and value from the output. If several identifiers are listed, choose one you expect the player to use consistently and record which one you selected in your administration notes.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteCreate narrower groups instead of giving everyone full access
The broad group.admin command allow pattern is convenient for a small trusted team, but it grants more command access than a moderator may need. Define a separate group and allow only the command it is responsible for:
add_ace group.moderator command.kick allow
add_principal identifier.license:MODERATOR_LICENSE_HASH group.moderatorThis example gives the moderator group permission for command.kick without automatically making its members full administrators. Add further command-specific rules only when the role requires them. Keep the group names descriptive and document who owns each role.
Nest groups when a role should inherit another role
ACE principals can be nested. If one group is made a principal of another, the inner group inherits the outer group’s permissions. This lets you define a base moderator role once and then create a senior role that receives those permissions plus additional entries. Test inheritance with a non-critical command before assigning the role to a live staff account, because a nesting mistake can either remove expected access or grant more than intended.
Protect high-impact commands
Broad command access should be paired with explicit denials for commands you do not want staff to run. The conventional example is:
add_ace group.admin command.quit denyReview every command supplied by your resources before granting a whole command principal. Treat commands that stop the server, alter principals, or change resource state as higher risk than routine moderation commands.
Grant permissions to resources and resource-management commands
ACE rules for general commands do not automatically authorize every resource. A script can protect its own actions with resource-level ACE entries, so the administrator group may need entries for the resource and for the commands used to manage it.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
A resource-management setup may require rules shaped like these:
add_ace group.admin resource.resource_name allow
add_ace group.admin command.sets allow
add_ace group.admin command.add_principal allow
add_ace group.admin command.add_ace allowReplace resource.resource_name with the actual resource principal used by the script. Do not copy that example unchanged and assume every resource uses the same name or command set. Read the resource’s documented ACE requirements and grant only what the staff role needs.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchA common symptom of a missing resource rule is an “Access denied” response when an administrator tries to run ensure or another resource-management action. Adding unrelated command permissions will not fix that case; add the matching resource or command ACE, reload the configuration, and test again.
Use txAdmin when you prefer a web interface
If txAdmin is installed and configured for the server, its web interface can manage administrators without manually editing server.cfg. This is useful for owners who want a guided player list, identifier view, and staff-management workflow rather than hand-maintaining every principal line.
- Open the txAdmin panel, commonly at
http://your-server-ip:40120. - Authenticate with an account that already has permission to manage staff.
- Open the administration or player-management area and select the person to promote.
- Assign the appropriate txAdmin permission level or group offered by your installation.
- Save the change and have the staff member reconnect or refresh their session if the panel indicates that it is required.
- Test both the panel action and any in-game command the staff member is expected to use.
txAdmin management and ACE entries are related operational choices, not interchangeable permission systems. A person may be authorized in the panel while a custom resource still checks its own ACE rule. Conversely, a manually assigned ACE principal does not necessarily give that person every txAdmin web capability. Confirm which surface the staff member needs: panel administration, in-game commands, resource control, or a combination.
Manual file editing versus txAdmin
| Approach | Where you work | Persistence | Best fit | Trade-off |
|---|---|---|---|---|
| Manual ACE configuration | server.cfg or a file loaded with exec |
Stored in the file and reapplied at startup | Owners who need exact command and resource control | Requires careful syntax, identifier accuracy, and a restart |
| txAdmin management | txAdmin web panel | Managed by the installed panel workflow | Teams that prefer a graphical staff-management interface | Requires txAdmin and may not configure a resource’s custom ACE rules |
Understand framework-specific administrator roles
ACE is a server permission layer, not a replacement for framework authorization. VORP stores its administrator group on the player’s user record in the database. Assigning group.admin in ACE therefore does not automatically change a VORP user’s database role, and changing a VORP role does not automatically grant every ACE command.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →RSG-based servers can use principals such as rsgcore.god, rsgcore.admin, and group.admin in configurations based on the Rexshack txAdmin recipe. Treat those as setup-specific conventions: inspect the recipe and the resources actually installed on your server before copying role names. A role recognized by one framework or recipe may be ignored by another.
When a staff member can run a core server command but cannot use a framework menu, check both layers separately: first the ACE group and command rule, then the framework’s user record, job, or group setting.
Troubleshoot an administrator who cannot use a command
“Access denied” immediately after adding the line
- Confirm the command has an
add_aceentry for the group the player belongs to. - Check whether the command is protected by a resource-specific principal rather than the general command principal.
- Verify that the player’s
add_principalline uses the exact identifier and correct prefix. - Make sure the group name is identical in both lines;
group.adminandgroup.Adminare not interchangeable labels. - Restart the server or the affected resource after saving the file.
The configuration loads but the player still has no access
An incorrect identifier can fail silently. Compare the value in the file character by character with the value shown in txAdmin or connection output. Look for a missing identifier. prefix, a copied space, a truncated hash, or a license: value paired with identifier.steam:. Have the player reconnect if the server only evaluated identifiers during connection.
Access worked until the next restart
The rule was probably entered only in the live console or in a file that the server does not load. Put it in server.cfg, or place it in permissions.cfg and add exec permissions.cfg to server.cfg. Restart once to confirm the rule survives a full startup.
Recommended Free Tools
Commands work, but resource controls fail
General command permission does not guarantee resource permission. Add the resource’s required ACE entry and any matching command.sets, command.add_principal, or command.add_ace entries. Test the exact action that failed, such as ensure, after reloading.
The panel works but an in-game script does not
Check whether the script reads ACE, a framework database role, or its own configuration. txAdmin authorization alone may not satisfy a script that checks group.admin or a resource principal. Grant the script’s documented permission or update the corresponding framework role rather than assuming the panel and script share one permission store.
Operate the permission file safely
- Use the least powerful group that meets each staff member’s duties.
- Prefer stable identifiers over display names, and remove a principal when staff access ends.
- Keep a dated backup before every permission change.
- Review broad rules such as
command allowand pair them with explicit denials for high-impact commands. - Separate group definitions from individual assignments so an audit can show both what a role can do and who has it.
- After every change, test one expected success and one expected denial with a non-production action.
- Do not assume a framework promotion, txAdmin role, or ACE principal automatically grants the other two.
With the group rules loaded, the correct identifier attached, and the server or resource restarted, the administrator’s effective access is the combination of those ACE entries and any additional framework or resource checks.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
