Manual:$wgGrantPermissions

Details
$wgGrantPermissions is a two-dimensional array indexed by grants and available permissions. The value is a boolean;  is equivalent to unsetting the key.

Grants are used to give external software limited access to an account; for example, by OAuth or by bot passwords. When a user account is accessed via some grants-based mechanism, to use some permission both an appropriate user group and an appropriate grant is required.

This configuration value should usually be set by extensions, not site administrators.

New grants can simply be created by using a new first-level key; such keys should be added to $wgGrantPermissionGroups as well.

Grants are managed internally by the class, and can be viewed via Special:ListGrants. The user-visible name of a grant can be defined via the  message.

Example
This allows external tools using a user account to ignore IP blocks if the user has that ability and has given the  grant to the tool.