Huh. Atwood’s trust-levels doc (which I should’ve just linked to originally) says that flagging is enabled at “TL1”, which I think corresponds to “Trust level: basic user”. So perhaps now, if not originally when this was asked, @Glimfeather can see the flagging option.