Wikipedia:Interface administrators

Interface administrators (interface-admins) are users who can edit all JavaScript (JS), Cascading Style Sheets (CSS), and JavaScript Object Notation (JSON) pages in the MediaWiki and User namespaces.^[1] They are the only local user group with the ability to edit all JS/CSS pages.^[2] These pages are executed by the browser of wiki editors and readers as code, which can be used to change how content is styled, change the behavior of pages, or even create complex tools to help with editing.

There are currently 15 interface administrators (including two bots). If you need assistance from an interface administrator, you can make a request at the interface administrators' noticeboard or use {{edit interface-protected}}.

Background

The ability to edit JS/CSS that is executed in other users' browsers is very powerful, and extremely dangerous in the hands of a malicious user; interface administrators should be users who are highly trusted, have at least a basic understanding of JS and CSS, are aware of the privacy expectations of Wikimedia wikis, and have a decent understanding of how to secure their accounts (such as choosing strong and unique passwords and avoiding malware infection).

The WMF Office requires all interface administrators to use two-factor authentication on their acccounts.^[3][4] Interface administrators that do not have two-factor authentication enabled, or who disable or remove it from their account security settings, will not be able to use their permissions until it is re-enabled and configured.^[5]

There is a similar global interface editors group, who may use their access subject to the global rights policy.

Process for requesting

The interface administrator permissions may be granted only to existing administrators.^[6][7]

• Venue: Wikipedia:Bureaucrats' noticeboard
• Process: The administrator makes a request, with a rationale, at the bureaucrats' noticeboard, to request interface administrator access. The request will remain open for 48 hours for first-time requests. Reinstatement requests, not under a cloud, will not have a waiting period. No notice at other noticeboards is required. Bureaucrats may inquire about why the administrator is requesting access at their discretion. All editors may discuss the applicant, but the final decision rests with the reviewing bureaucrat. Bureaucrats may not assign access to themselves.^[6]
• Duration of right: Permanent by default, can be temporary if requested.^[8]

Removal of permissions

Shortcut

• WP:IAREVOKEWP:IAREVOKE

The interface administrator permissions on an account should be removed by bureaucrats in the following circumstances:^[8]

1. Interface administrators who have made no edits or other logged actions for at least 2 months or who have made no edits using the permission for at least 12 months should have the user right removed.
2. Voluntary request by the interface administrator at the bureaucrats' noticeboard.
3. After consensus has been reached asserting that the permissions have been misused (e.g. at Wikipedia:Administrators' noticeboard).
4. Upon the removal of the administrator toolset from an account, for any reason.
5. By request of the Arbitration Committee.

Bots

Any bot operator requesting access for their bot(s) must permanently possess the user right themselves.^[8] As with regular interface administrator accounts, bot accounts with this permission must have 2FA enabled and use a strong password.

Technical access

There are two general kinds of pages in the MediaWiki namespace: Message pages and site configuration pages. Interface administrators can edit and delete these pages, and can modify user configuration pages that live in the user space of other editors. Administrators who are not interface administrators can instead edit and delete most message pages (but not all of them).

Administrators and oversighters who are not interface administrators can delete and revision delete (or suppress in the case of oversighters) JS or CSS pages that live in the user space of other editors, as well as view their deleted revisions. However, they cannot undelete pages, or restore revisions of those pages. Both regular administrators and interface administrators can modify JSON pages in the MediaWiki namespace or within the user space of other editors.

Access to code file pages located in the MediaWiki namespace and in the user space of other editors

Action	User	Administrator	Interface administrator
View	Yes	Yes	Yes
Create	No	No	Yes
Edit	No	No	Yes
Move	No	No	Yes
Revision Delete	No	Yes	Yes
Delete (MediaWiki space)	No	No	Yes
Delete (user space)	No	Yes	Yes
View deleted history	No	Yes	Yes
Undelete	No	No	Yes

Notes

1. Sitewide pages, such as MediaWiki:Common.js or MediaWiki:Vector.css, or the gadget pages listed on Special:Gadgets, and the JS, CSS, and JSON subpages of other accounts.
2. Any administrator can edit other pages in the MediaWiki namespace and all JSON pages, and all registered users may edit their own personal JS/CSS/JSON pages as used by Wikipedia:User scripts.
3. WMF 2FA requirement as published on Meta-Wiki.
4. m:Interface administrators: "For legal and security reasons, the Wikimedia Foundation has decided that Two factor authentication is required for this role on all projects".
5. phab:T150898
6. Limited to administrators in this September 2018 RfC
7. Limited to administrators in this October 2018 RfC
8. This process was approved in this RfC.

See also

• {{User wikipedia/Interface administrator}}, a userbox to indicate having interface administrator permission
• {{User interface admin since}}, a userbox to indicate having interface administrator permission with period of time
• {{Interface administrator topicon}} – a top icon template to indicate you have the Interface administrator user right – adds a category to page automatically

• How you can help keep Wikimedia sites Error-free on checking for JavaScript errors