FiveM ACE permissions and principals

ACE is FiveM's built-in permission system. It decides who can use admin commands, who can restart resources, and who can ban players. It works the same on every server - vanilla, ESX, QBCore, Qbox - because it's part of FiveM itself, not any framework.

You'll build: A permission system using ACE and principals - give admins, moderators, and trusted players exactly the powers they need and nothing more.
Time: ~20 minutes
You need: A FiveM server with server.cfg access. No resources or frameworks required - ACE is built into FiveM itself.
You'll learn: What ACE permissions are, how principals connect players to groups, how allow and deny work together, wildcard permissions, and how to build a clean staff permission system.

BEFORE YOU START

Build it

Understand the three parts

You can explain each piece of the permission system.

Every ACE line has three parts:

code

add_ace <principal> <permission> <allow|deny>

Principal - who. A group (group.admin), an individual (identifier.license:abc123), or everyone (builtin.everyone)
- what. , , , or custom like

FiveM ACE permissions and principals

Build it

Understand the three parts

Add a player to a group (principals)

Give permissions to a group (ACEs)

Use wildcards for bulk permissions

Keep reading the full lesson