Custom EntitiesDynamic Permissions

Dynamic Permissions

How entity-specific permissions are created, assigned, and managed.

Dynamic Permissions

How It Works

Every entity type gets its own set of four permissions, created automatically when the entity type is created. These permissions integrate with the existing role-based access control system.

Permission Names

Permissions follow the pattern {entity-slug}.{action}:

  • companies.view — view company records
  • companies.create — create new company records
  • companies.edit — edit existing company records
  • companies.delete — delete company records

The permissions are grouped under the entity type’s slug in the Roles page, so all four appear together.

Auto-Assignment to Full Access

When a new entity type is created, its four permissions are automatically added to every "Full Access" role in your agency. This means users with Full Access can immediately work with the new entity type without any manual configuration.

Custom Roles

For custom roles, you need to explicitly grant entity type permissions through the Roles page. The dynamic permissions appear alongside the standard permissions (contacts, documents, forms, etc.) grouped by entity type name.

Permission Level

Dynamic permissions operate at the subaccount level, meaning they control access within a subaccount context. Agency-level users who switch into a subaccount use their subaccount membership’s role to determine access.

Cleanup on Deletion

When an entity type is deleted, its four permissions are automatically removed from the system, including all role assignments. No orphaned permissions remain.

Was this article helpful?