Permissions

Every node defaults to op only. There is deliberately no finexbans.* wildcard — one mistyped wildcard would hand the whole punishment system to a stranger. Grant nodes one by one:

lp group moderator permission set finexbans.ban true
lp group moderator permission set finexbans.mute true
lp group moderator permission set finexbans.warn true
lp group moderator permission set finexbans.info true
lp group moderator permission set finexbans.staff true

Punishing

Node	Allows
finexbans.ban	/ban, /tempban
finexbans.ban.permanent	a ban without a duration
finexbans.ipban	/ipban
finexbans.ipban.permanent	permanent IP ban
finexbans.mute	/mute, /tempmute
finexbans.mute.permanent	permanent mute
finexbans.kick	/fkick
finexbans.warn	/warn
finexbans.gui	/punish menu

Lifting

finexbans.unban, finexbans.unipban, finexbans.unmute, finexbans.unwarn

Looking up

finexbans.history, finexbans.check, finexbans.alts, finexbans.banlist, finexbans.mutelist — or all five at once with finexbans.info.

Staff and admin

Node
finexbans.staff	staff alerts (alts, banned player tried to join, filter hits) and /sc
finexbans.admin	/finexbans reload, license, import

Protection and bypasses

Node
finexbans.exempt	this player cannot be punished. Checked for offline players too when LuckPerms is installed
finexbans.exempt.bypass	may punish exempt players anyway
finexbans.limits.bypass	ignores limits: in config
finexbans.filter.bypass	not checked by the chat filter

A typical setup

Group	Nodes
helper	kick, mute, warn, unmute, unwarn, info, staff, exempt
moderator	helper + ban, unban, ipban, unipban, gui
admin	moderator + ban.permanent, mute.permanent, ipban.permanent, exempt.bypass, limits.bypass, admin