Individual security permissions in ARES are referred to as security rules. An individual's user rank must meet or exceed the security level of a corresponding rule to perform any action (with some exceptions; see next section).

The level of a rule can be adjusted through the access controls... > rules... menu, or directly, with security <rule> <level>

add manager
give someone the rank of manager unless they already have the rank of owner.
add owner
give someone the rank of owner.
add user
give someone the rank of user, unless they are already a manager or owner.
arouse
trigger sexual arousal events (requires the Sexuality add-on)
chat
make the unit send chat messages.
database
permission to use the db program (some features are always restricted to owner only)
delete file
remove any file from ring 3 using the fs delete command.
demote manager
reduce a manager to user rank, or to remove a manager entirely.
demote owner
reduce an owner in rank, or to remove an owner entirely.
demote self
remove oneself from the user list, or reduce one's own rank; this supersedes other rank requirements.
identity
change the unit's name, gender, or color settings.
local
run commands when within chat range (20m) of the unit; activate verbal commands (see trigger) at any range.
manage
access the 'settings' and 'access control' menus, use the 'ax' program to add or remove software, and similar.
menu
access the menu.
persona
change the unit's persona.
remote
run commands from anywhere in the current region.
restrain
apply RLV restrictions using the RLV relay. (if RLV relay is installed; does not show in menus)
run-away
use the security reset command to clear the user list and restore self-ownership.
safeword
if restraint is installed, use the restraint safeword command to abort RLV relay interactions.
vox
adjust vox filtering settings. (See vox)
yank
automatically teleport the unit when sending a teleport invite.