getthreadidentity

Reads the security identity level from the current Luau thread's internal context. Roblox uses a numeric identity system (0–8) to control API access:

• 0 — Untrusted (no special access)
• 1–2 — LocalScriptLocalScriptA Roblox script type that runs on the client (player's machine). Has access to client-only APIs like UserInputService, Camera, and local player. Executes in the context of the local Player. / Script (normal game scripts)
• 3–4 — Plugin/CommandBar
• 5–6 — RobloxScript
• 7–8 — CoreScript (full access to all APIs)

Executor scripts typically run at identity 3+ to access restricted APIs.

Each lua_State (Luau thread) carries an extraSpace struct that includes a context / identity field. This integer is checked by Roblox C++ API methods before allowing calls to restricted services like DataModel:GetService("CoreGui").