wmf-legal

The wmf-legal global group is assigned to some members of the WMF Legal and Trust and Safety teams. It was created in September 2026 as part of a a project to split the staff group into smaller groups.

It is different from the WMF Trust and Safety local group, which provides the ability to edit arbitrary permissions, although many staff are part of both.

Assignment

Wikimedia stewards will add or remove permissions from the wmf-legal global user group and they also add or remove user accounts from this global user group based on the requests of the Trust and Safety Team. Rights are assigned in accordance with the Wikimedia Foundation Staff Userrights Policy. There is no requirement that community consensus be demonstrated or that the above requirements (including sign-offs) are proved.

Rationale and responsibility of advanced permissions assignment for Wikimedia Foundation staff are currently recorded in a locked Google spreadsheet. A mirror of that page can be found at WMF Advanced Permissions.

Permissions

• View and create filters that use protected variables (abusefilter-access-protected-vars)
• View hidden abuse log entries (abusefilter-hidden-log)
• Hide entries in the abuse log (abusefilter-hide-log)
• View log entries of abuse filters marked as private (abusefilter-log-private)
• View private data in the abuse log (abusefilter-privatedetails)
• View the AbuseFilter private details access log (abusefilter-privatedetails-log)
• View logs related to accessing protected variable values (abusefilter-protected-vars-log)
• View abuse filters marked as private (abusefilter-view-private)
• Have one's own edits automatically marked as patrolled (autopatrol)
• Block or unblock a user from sending email (blockemail)
• Search deleted pages (browsearchive)
• Check users' IP addresses and other information (checkuser)
• View the checkuser log (checkuser-log)
• Process checkuser suggested investigations (checkuser-suggested-investigations)
• View the log of access to temporary account IP addresses (checkuser-temporary-account-log)
• View IP addresses used by temporary accounts without needing to turn on the preference (checkuser-temporary-account-no-preference)
• Delete pages (delete)
• View deleted history entries, without their associated text (deletedhistory)
• View deleted text and changes between deleted revisions (deletedtext)
• Delete and undelete specific log entries (deletelogentry)
• Delete and undelete specific revisions of pages (deleterevision)
• Edit the user interface (editinterface)
• Edit protected pages (fully protected) (editprotected)
• Edit protected pages (semi protected) (editsemiprotected)
• Edit other users' CSS files (editusercss)
• Edit other users' JavaScript files (edituserjs)
• Edit other users' JSON files (edituserjson)
• Edit restricted pages (extendedconfirmed)
• Create Structured Discussions boards in any location (flow-create-board)
• Delete Structured Discussions topics and posts (flow-delete)
• Suppress Structured Discussions topics and posts (flow-suppress)
• Bypass global IP blocks (globalblock-exempt)
• Block or unblock a username, hiding or unhiding it from the public (hideuser)
• Import pages from other wikis (import)
• Bypass IP blocks, auto-blocks and range blocks (ipblock-exempt)
• Retrieve information about IP addresses attached to revisions or log entries (ipinfo)
• Look up IP information for arbitrary IP addresses on Special:IPInfo (ipinfo-view-arbitrary-ip)
• Access a full view of the IP information attached to revisions or log entries (ipinfo-view-full)
• View a log of who has accessed IP information (ipinfo-view-log)
• Move pages (move)
• Move root user pages (move-rootuserpages)
• Move pages with their subpages (move-subpages)
• Move files (movefile)
• Move pages with stable versions (movestable)
• Suppress OAuth consumers (mwoauthsuppress)
• View private OAuth data (mwoauthviewprivate)
• View suppressed OAuth consumers (mwoauthviewsuppressed)
• Not be affected by rate limits (noratelimit)
• Disable two-factor authentication for a user (oathauth-disable-for-user)
• Override the spoofing checks (override-antispoof)
• View recent changes patrol marks (patrolmarks)
• Change protection settings and edit cascade-protected pages (protect)
• Overwrite existing files (reupload)
• Override files on the shared media repository locally (reupload-shared)
• Quickly rollback the edits of the last user who edited a particular page (rollback)
• Perform CAPTCHA-triggering actions without having to go through the CAPTCHA (skipcaptcha)
• View private logs (suppressionlog)
• Not create redirects from source pages when moving pages (suppressredirect)
• View, hide and unhide specific revisions of pages from any user (suppressrevision)
• Override the disallowed titles or usernames list (tboverride)
• Override the disallowed usernames list (tboverride-account)
• Edit protected templates (templateeditor)
• Undelete a page (undelete)
• View a list of unwatched pages (unwatchedpages)
• Upload files (upload)

See also

• wmf-legal: global permission · global groups (toolforge) · member list · group changelog
• Special global permissions