diff --git a/Kyoo.Common/Models/Attributes/PermissionAttribute.cs b/Kyoo.Common/Models/Attributes/PermissionAttribute.cs
index b34fb48b..40228782 100644
--- a/Kyoo.Common/Models/Attributes/PermissionAttribute.cs
+++ b/Kyoo.Common/Models/Attributes/PermissionAttribute.cs
@@ -7,12 +7,17 @@ namespace Kyoo.Models.Permissions
 	/// <summary>
 	/// The kind of permission needed.
 	/// </summary>
+	/// <remarks>
+	/// The admin kind is used for configuration or security sensitive permissions to allow one
+	/// to use an overall permission without compromising security.
+	/// </remarks>
 	public enum Kind
 	{
 		Read,
 		Write,
 		Create,
-		Delete
+		Delete,
+		Admin
 	}
 	
 	/// <summary>
diff --git a/Kyoo.Common/Module.cs b/Kyoo.Common/Module.cs
index c1c09165..ea87b604 100644
--- a/Kyoo.Common/Module.cs
+++ b/Kyoo.Common/Module.cs
@@ -1,5 +1,6 @@
 using System;
 using Kyoo.Controllers;
+using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.DependencyInjection;
 
 namespace Kyoo
@@ -62,5 +63,12 @@ namespace Kyoo
 			services.Add(ServiceDescriptor.Describe(typeof(T), typeof(T2), lifetime));
 			return services.AddRepository<T2>(lifetime);
 		}
+
+		public static IServiceCollection AddConfiguration<T>(this IServiceCollection services, IConfiguration config, string path)
+		{
+			services.Configure<T>(config.GetSection(path));
+			services.AddSingleton<ConfigReference>(new ConfigReference(path, typeof(T)));
+			return services;
+		}
 	}
 }
\ No newline at end of file
diff --git a/Kyoo/Program.cs b/Kyoo/Program.cs
index 9fecc61b..16b6d098 100644
--- a/Kyoo/Program.cs
+++ b/Kyoo/Program.cs
@@ -1,4 +1,5 @@
 using System;
+using System.Diagnostics.CodeAnalysis;
 using System.IO;
 using System.Threading.Tasks;
 using Microsoft.AspNetCore.Hosting;
@@ -18,6 +19,7 @@ namespace Kyoo
 		/// Main function of the program
 		/// </summary>
 		/// <param name="args">Command line arguments</param>
+		[SuppressMessage("ReSharper", "ConditionIsAlwaysTrueOrFalse")]
 		public static async Task Main(string[] args)
 		{
 			if (!File.Exists("./settings.json"))
diff --git a/Kyoo/Views/ConfigurationApi.cs b/Kyoo/Views/ConfigurationApi.cs
new file mode 100644
index 00000000..2dfbc463
--- /dev/null
+++ b/Kyoo/Views/ConfigurationApi.cs
@@ -0,0 +1,41 @@
+using Kyoo.Models.Permissions;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.Extensions.Configuration;
+
+namespace Kyoo.Api
+{
+	/// <summary>
+	/// An API to retrieve or edit configuration settings
+	/// </summary>
+	[Route("api/config")]
+	[Route("api/configuration")]
+	[ApiController]
+	public class ConfigurationApi : Controller
+	{
+		/// <summary>
+		/// The configuration to retrieve and edit. 
+		/// </summary>
+		private readonly IConfiguration _config;
+
+		/// <summary>
+		/// Create a new <see cref="ConfigurationApi"/> using the given configuration.
+		/// </summary>
+		/// <param name="config">The configuration to use.</param>
+		public ConfigurationApi(IConfiguration config)
+		{
+			_config = config;
+		}
+
+		/// <summary>
+		/// Get a permission from it's slug.
+		/// </summary>
+		/// <param name="slug">The permission to retrieve. You can use __ to get a child value.</param>
+		/// <returns>The associate value or list of values.</returns>
+		[HttpGet("{slug}")]
+		[Permission(nameof(ConfigurationApi), Kind.Admin)]
+		public ActionResult<object> GetConfiguration(string slug)
+		{
+			return _config[slug];
+		}
+	}
+}
\ No newline at end of file
diff --git a/Kyoo/settings.json b/Kyoo/settings.json
index fed2bd58..114636fe 100644
--- a/Kyoo/settings.json
+++ b/Kyoo/settings.json
@@ -32,8 +32,8 @@
       "password": "passphrase"
     },
     "permissions": {
-      "default": ["overall.read", "overall.write", "overall.create", "overall.delete"],
-      "newUser": ["overall.read", "overall.write", "overall.create", "overall.delete"]
+      "default": ["overall.read", "overall.write", "overall.create", "overall.delete", "overall.admin"],
+      "newUser": ["overall.read", "overall.write", "overall.create", "overall.delete", "overall.admin"]
     },
     "profilePicturePath": "users/",
     "clients": []