User group rights

• Create discussion pages (createtalk)
• Create new user accounts (createaccount)
• Create pages (which are not discussion pages) (createpage)
• Create short URLs (urlshortener-create-url)
• Create translation units for empty categories (translate-empty-category)
• Edit using the translate interface (translate)
• Edit your own preferences (editmyoptions)
• Edit your own private data (e.g. email address, real name) and request password reset emails (editmyprivateinfo)
• Mark translation units as no longer outdated (unfuzzy)
• Merge their account (centralauth-merge)
• Read my notifications (echo-read-notifications)
• Read pages (read)
• Run Functions (wikilambda-execute)
• Run Functions in the public API (wikifunctions-run)
• View abuse filters (abusefilter-view)
• View the abuse log (abusefilter-log)
• View your own private data (e.g. email address, real name) (viewmyprivateinfo)

• Not be affected by rate limits (noratelimit)

• Create pages with non-default content models (createwithcontentmodel)
• Edit protected pages (semi protected) (editsemiprotected)
• Email event participants (campaignevents-email-participants)
• Enable event registrations (campaignevents-enable-registration)
• Move pages (move)
• Not be affected by IP-based rate limits (autoconfirmed)
• Organize events (campaignevents-organize-events)
• Perform CAPTCHA-triggering actions without having to go through the CAPTCHA (skipcaptcha)
• Reset failed or transcoded videos so they are inserted into the job queue again (transcode-reset)
• Save books as community page (collectionsaveascommunitypage)
• Save books as user page (collectionsaveasuserpage)
• View information about the current transcode activity (transcode-status)
• View detailed abuse log entries (abusefilter-log-detail)

• Have one's own edits automatically marked as patrolled (autopatrol)

• Be treated as an automated process (bot)
• Bypass blocked external domains (abusefilter-bypass-blocked-external-domains)
• Bypass the spam block list (sboverride)
• Edit protected pages (semi protected) (editsemiprotected)
• Have one's own edits automatically marked as patrolled (autopatrol)
• Not be affected by IP-based rate limits (autoconfirmed)
• Not be affected by rate limits (noratelimit)
• Not create redirects from source pages when moving pages (suppressredirect)
• Not have minor edits to discussion pages trigger the new messages prompt (nominornewtalk)
• Perform CAPTCHA-triggering actions without having to go through the CAPTCHA (skipcaptcha)
• Use higher limits in API queries (apihighlimits)

This group has restrictions

• Access the log of two-factor authentication changes (oathauth-view-log)
• Automatically reveal IP addresses used by temporary accounts (checkuser-temporary-account-auto-reveal)
• Not be affected by rate limits (noratelimit)
• Override the spoofing checks (override-antispoof)
• Verify whether a user has two-factor authentication enabled (oathauth-verify-user)
• View IP addresses used by temporary accounts (checkuser-temporary-account)
• Add groups: Wikifunctions staff, Account creators, Administrators, Interface administrators, Bureaucrats, Bots, Confirmed users, Translation administrators and Maintainers
• Remove groups: Wikifunctions staff, Account creators, Bots, Confirmed users, Interface administrators, Translation administrators and Maintainers

This group has restrictions

• Access a full view of the IP information attached to revisions or log entries (ipinfo-view-full)
• Automatically reveal IP addresses used by temporary accounts (checkuser-temporary-account-auto-reveal)
• Check users' IP addresses and other information (checkuser)
• Look up IP information for arbitrary IP addresses on Special:IPInfo (ipinfo-view-arbitrary-ip)
• Process checkuser suggested investigations (checkuser-suggested-investigations)
• Retrieve information about IP addresses attached to revisions or log entries (ipinfo)
• View IP addresses used by temporary accounts without needing to turn on the preference (checkuser-temporary-account-no-preference)
• View a log of who has accessed IP information (ipinfo-view-log)
• View logs related to accessing protected variable values (abusefilter-protected-vars-log)
• View private data in the abuse log (abusefilter-privatedetails)
• View the AbuseFilter private details access log (abusefilter-privatedetails-log)
• View the checkuser log (checkuser-log)
• View the log of access to temporary account IP addresses (checkuser-temporary-account-log)

• Create pages with non-default content models (createwithcontentmodel)
• Edit protected pages (semi protected) (editsemiprotected)
• Email event participants (campaignevents-email-participants)
• Enable event registrations (campaignevents-enable-registration)
• Move pages (move)
• Not be affected by IP-based rate limits (autoconfirmed)
• Organize events (campaignevents-organize-events)
• Perform CAPTCHA-triggering actions without having to go through the CAPTCHA (skipcaptcha)
• Reset failed or transcoded videos so they are inserted into the job queue again (transcode-reset)
• Save books as community page (collectionsaveascommunitypage)
• Save books as user page (collectionsaveasuserpage)
• View information about the current transcode activity (transcode-status)
• View detailed abuse log entries (abusefilter-log-detail)

• Email event participants (campaignevents-email-participants)
• Enable event registrations (campaignevents-enable-registration)
• Generate invitation lists (campaignevents-generate-invitation-lists)
• Organize events (campaignevents-organize-events)

• Connect a Test Case to its Function (wikilambda-connect-tester)
• Connect an Implementation to its Function so it can be run (wikilambda-connect-implementation)
• Disconnect a Test Case from its Function (wikilambda-disconnect-tester)
• Disconnect an Implementation from its Function so it cannot be run (wikilambda-disconnect-implementation)
• Edit Function that has a connected Implementation