Currently everyone can execute any BrainzBot command and we've decided that in most cases we don't want to arbitrarily limit commands to certain user groups.

However we may add commands in the future that should be restricted either because of massive abuse potential (e.g. deleting data) or because they may assist channel operators in certain tasks (e.g. kicking users).

Freso suggested using ChanServ's ACCESS list for this which seems like the most sensible thing to do if we don't want to reinvent the wheel.