The discussion centers on whether Trust Level 4 (T4) members can access personally identifiable information (PII), such as other users’ email addresses. hmmmnotsure asks for clarification and seeks ways to restrict T4 privileges like editing others’ posts, closing topics, or sending private messages. Moin notes that while settings like edit all post groups can be adjusted, preventing actions like closing topics may not be feasible — suggesting trust and communication as alternatives. NateDhaliwal confirms T4s cannot view PII, which is reserved for moderators and admins. Heliosurge adds that while TL4s generally can’t view account details, there may be edge cases involving logs during user deletion. hmmmnotsure concludes they’ll rely on guidance rather than technical restrictions. In follow-up, hmmmnotsure asks if T4s can ban spammers or delete spam — Heliosurge clarifies that while T4s can edit/delete posts, only full moderators or admins can ban/delete/anonymize accounts. Category Moderators can manage flags but must defer to full mods for final actions. Heliosurge recommends using the Documentation Category for further guidance, sharing links to the Site Management Index and User Roles & Permissions.
Can T4 members access personally identifiable information like other customers’ email address?
Is this updated?
How can I restrict them from editing other customers’ posts?
I don’t want this to happen, “Flagging a post immediately takes effect and hides the target post” because they currently flag posts for escalating issues too.
I don’t want them to send personal messages to an email address, or close topics.
In general, the table mentions the related settings. For example, if you don’t want them to be able to edit all posts, you can remove them from the edit all post groups site setting.
But I don’t think it’s possible to prevent them from for example closing topics. Since you manually promote those users, can’t you trust them enough so they won’t do something if you tell them not to do it?
What is the reason why you want them to be trust level 4?
In addition, if you remove all these features, then… there’s almost no perks of being TL4…
That said, TL4s aren’t able to access user’s PII, as that is only visible for Mods and Admins.
Unless something has changed generally only an Admin & maybe full site mod(if a setting is changed) can view a member’s email address.
However unless changed there was a bit of loophole for full site moderators viewing Log file. Iirc this was typically more exposed(email address) during a user deletion/anonymized user. The log contained the email address.
TL4 cannot view user account details typically unless there is a setting to expose that.
I as admin have had to figure out a clever method of unanomize a user or 2 when a Mod took an unsanctioned action against a member on a site I volunteer admin on. Not perfect to restore but is in part doable.
Thank you for your responses.
I’ll ask them not to use certain features. Seems like a better way to go.
One more question, can T4 members block (ban) spammers and delete the spam posts? Or can they only temporarily mute?
TL4 is an elevated account that can edit/delete posts
Category Moderators can manage flags; however unless something has changed. The Cat Mod can only “agree”, “Disagree” or “ignore/defer” a flag.
Full site Moderator/Admin is required to ban/delete/anonymize user accounts.
A general good thing to do is to have your TL4 and/or Cat Mods either reflag post as Other and @mention a full mod for assistance. That or message a full mod with a link to the post/user.
These 2 links will help from Documentation category.
First link Managing a Discourse site Index
2nd Link User Roles & permissions from the above.
The Documentation Category is a special Category access it from the sidebar many new improvements makes it a lot more user friendly to find info about Discourse.
