Wikipedia:Interface administrators

Interface administrators (interface-admins) are users who can edit all Cascading Style Sheets (CSS), JavaScript (JS), and Javascript Object Notation (JSON) pages and pages in the MediaWiki namespace. They are the only local user group with the ability to edit all CSS/JS pages. These pages are executed by the browser of wiki editors and readers as code, which can be used to change how content is styled, change the behavior of pages, or even create complex tools to help with editing.

The ability to edit CSS/JS that is executed in other users' browsers is very powerful and extremely dangerous in the hands of a malicious user; interface administrators should be users who are highly trusted, have at least a basic understanding of CSS and JS, are aware of the privacy expectations of Wikimedia wikis, and have a decent understanding of how to secure their accounts (such as choosing strong and unique passwords and avoiding malware infection). The WMF Office requires all interface administrators to use two-factor authentication.

There are currently 9 interface administrators (including one interface-admin bot). If you need assistance from an interface administrator, you can make a request at the Interface administrators' noticeboard. Note there is a similiar global group, who may use their access subject to the global rights policy.

Process for requesting

Per community discussions, interface admin rights may be granted only to existing administrators. The Wikimedia Foundation requires interface administrators enable two-factor authentication (2FA) for legal and security reasons.

• Venue: Wikipedia:Bureaucrats' noticeboard
• Process: Admin makes a request, with a rationale, at the bureaucrats’ noticeboard, to request interface administrator access. The request will remain open for 48 hours for first-time requests. Re-admin requests, not under a cloud, will not have a waiting period. No notice at other noticeboards is required. Bureaucrats may inquire about why admins are requesting access at their discretion. Editors may discuss the applicant, but the final decision rests with the reviewing bureaucrat. Bureaucrats may not assign access to themselves.
• Duration of right: Permanent by default, can be temporary if requested.

Removal of permissions

Permission should be removed by bureaucrats in the following circumstances:

1. Interface administrators who have made no edits or other logged actions for at least 2 months or who have made no edits using the permission for at least 6 months should have the user right removed.
2. Voluntary request by the interface administrator at the bureaucrats' noticeboard.
3. After misuse of the access by consensus (e.g. at Wikipedia:Administrators' noticeboard).
4. Upon removal of administrator access, for any reason.
5. By request of the Arbitration Committee.

Bots

Any bot operator requesting access for their bot(s) must permanently possess the user right themselves.

All bot operators are required to enable 2FA for their bot accounts and create a strong account password, and are strongly urged to use OAuth for maximum security. Bureaucrats and BAG members may ask bot operators to enforce these security measures at their discretion.

Technical access

Interface administrators have full abilities with all CSS and JS pages that are located in the MediaWiki namespace or within the user space of other editors; administrators who are not interface administrators have the ability to view and delete those pages only. They also cannot view the deleted history of CSS or JS pages in those areas (even if they were the user who deleted it), nor can they restore any deleted revisions of those pages. Both regular administrators and interface administrators have full abilities with JSON pages in the MediaWiki namespace or within the user space of other editors.