Dynamic Permissions
How entity-specific permissions are created, assigned, and managed.
Dynamic Permissions
How It Works
Every entity type gets its own set of four permissions, created automatically when the entity type is created. These permissions integrate with the existing role-based access control system.
Permission Names
Permissions follow the pattern {entity-slug}.{action}:
companies.view— view company recordscompanies.create— create new company recordscompanies.edit— edit existing company recordscompanies.delete— delete company records
The permissions are grouped under the entity type’s slug in the Roles page, so all four appear together.
Auto-Assignment to Full Access
When a new entity type is created, its four permissions are automatically added to every "Full Access" role in your agency. This means users with Full Access can immediately work with the new entity type without any manual configuration.
Custom Roles
For custom roles, you need to explicitly grant entity type permissions through the Roles page. The dynamic permissions appear alongside the standard permissions (contacts, documents, forms, etc.) grouped by entity type name.
Permission Level
Dynamic permissions operate at the subaccount level, meaning they control access within a subaccount context. Agency-level users who switch into a subaccount use their subaccount membership’s role to determine access.
Cleanup on Deletion
When an entity type is deleted, its four permissions are automatically removed from the system, including all role assignments. No orphaned permissions remain.
Was this article helpful?