Permissions

The permissions the Sites modules define, by module. A per-site role grants them on its site only.

Sites (sites)

Permission	Machine name	Description	Restricted
Access disabled sites	access disabled sites	Visit a disabled site on its hostname and see it in site lists and pickers, to check it before it is enabled.	yes
Add type content to a site	add {entity_type}:{bundle} content to site	One per content type the sites accept, for bundleless types add {entity_type} content to site. Assign type content to a site: as a global permission, to the sites the user is a member of; through a per-site role, to that site.
Add content to a site	add content to site	Assign content of any type to a site: as a global permission, to the sites the user is a member of; through a per-site role, to that site. "Administer sites" covers every site.
Add existing users to a site	add user content to site	Search the active accounts of the platform by name and add them as members of a site: as a global permission, to the sites the user is a member of; through a per-site role, to that site.
Administer sites	administer sites	Create, set up and run every site: its dashboard, identity, settings, members and content. Site types, platform configuration and reports need "Administer sites configuration".	yes
Administer sites configuration	administer sites configuration	Manage site types, the platform configuration pages of Sites and its modules, and the status and access reports. Includes "View site access reports".	yes
Manage site members	manage site members	View and remove the members of a site the user manages, and grant or revoke the roles the site type offers there. Adding existing users needs "Add existing users to a site". Administrator roles, roles with restricted permissions and global roles cannot be granted this way. Can be given as a per-site role.
Manage site settings	manage site settings	Change the settings of a site the user manages (appearance, site information and the other setting sections, also through the dashboard's launch steps and the agent tools) and enable or disable the site. Editing the site's identity (hostname, structure, main site) needs "Administer sites". Can be given as a per-site role.
Remove type content from a site	remove {entity_type}:{bundle} content from site	One per content type the sites accept, for bundleless types remove {entity_type} content from site. Remove type content from a site: as a global permission, from the sites the user is a member of; through a per-site role, from that site.
Remove content from a site	remove content from site	Remove content of any type from a site: as a global permission, from the sites the user is a member of; through a per-site role, from that site. "Administer sites" covers every site.
View foreign site assignments	view foreign site assignments	In entity forms and site summaries, see all sites a content item belongs to, including sites the user does not manage (read-only). Without it those sites are hidden. The forms never change them.
View unassigned content	view unassigned content	See content that belongs to no site, on the Unassigned content report and in the hub's term overview. Users with "Administer sites" have this too. Assigning that content needs "Add content to a site".	yes

Sites content overrides (sites_content_overrides)

Permission	Machine name	Description	Restricted
Override site content	override site content	Change what shared content shows on a site without changing it for other sites. A site can override content it may not edit.

Sites devel (sites_devel)

Permission	Machine name	Description	Restricted
View the Sites debug block	use sites_devel	See the debug block on every page: the site candidates, the active site, the route, the languages, and the path aliases and redirects of the current entity.	yes

Sites Shield (sites_shield)

Permission	Machine name	Description	Restricted
Bypass password protection	skip sites_shield auth	Reach password-protected sites without entering their user name and password.

Sites UI (sites_ui)

Permission	Machine name	Description	Restricted
Access the site dashboard	access site dashboard	Open the dashboard of a site, with its launch checklist, facts and content summary. Each link on the dashboard needs its own permission.
View site access reports	view site access reports	See who holds which role on which site, in the platform, per-site and per-user access reports. Grants no right to change anything.	yes