Sharing your server with friends (subusers)

What this is about
Want a friend or co-admin to be able to restart the server, edit configs or
install mods? Don't share your password. Add them as a subuser
instead. They log in with their own account and can only do what you allow,
and you can remove them at any time.
Adding a subuser
Open your server and go to the Subusers tab.
Click Create Subuser.
Enter their email address.
Tick the Permissions you want them to have (see below).
Click Create.
If they already have a panel account with that email, the server appears
on their dashboard straight away.
If they don't, the panel creates an account for them and emails them a
link to set a password. Ask them to check their spam folder if it doesn't
arrive within a few minutes.
You can add up to 25 subusers per server.
Choosing permissions
Permissions are grouped by section of the panel: CONTROL, SUBUSERS,
FILES, BACKUPS, SCHEDULES, STARTUP, SETTINGS and so on.
Tick a group's box to give everything in it, or click the ⌄ arrow to pick
individual permissions. The Selected Permissions box on the right shows what
you've picked so far.
Give people only what they need. You can always add more later.
If you want them to…
Give them
Watch the console and restart a stuck server
Control: read console, console, start, stop, restart
Edit configs and upload files
Files: create, read, read content, update (and sftp if they use an SFTP program)
Install/update Vintage Story mods
Files create & delete, plus VSMODS read & update
Make and restore backups
Backups: create, read, restore (add download to let them download copies)
Set up automatic restarts
Schedules
Change game version or startup settings
Startup
Help manage other subusers
Subusers (careful: they can then add people too)
A few permissions effectively give full control: Files → update/delete (they can change or remove anything), Backups → restore/delete, Startup, and Settings → reinstall. Only give these to people you trust with your whole server.
A sensible "trusted helper" set
Control (all), Files (all except delete), Backups (create, read),
Schedules (read), Activity (read).
A "can only restart it" set
Control → read console, start, stop, restart. That's it.
Hiding files from a subuser
Ignored Files lets you hide files and folders from a subuser completely,
in the file manager and over SFTP. Enter one pattern per line, for example:
secrets/
*.env
config/discord-bot.json
A pattern starting with 
! un-hides something a broader pattern hid.
Changing or removing a subuser
On the Subusers tab, click the subuser to change their permissions, or use
Remove to take away their access. Removing a subuser doesn't delete their
panel account, only their access to this server.
The 2FA Enabled column shows whether each subuser protects their account
with two-factor authentication. For anyone with powerful permissions, ask them
to turn it on.
Seeing what subusers did
The Activity tab logs actions on your server (power actions, file edits,
backups and so on) along with who did them. If something changed and you don't
know why, check there first.
For the subuser: where's the server?
Once you've been added, the server shows up on your dashboard when you log
in to the panel, alongside any servers you own. You'll only see the tabs and
buttons your permissions allow.