# Configuring access to global permission sets

{% hint style="info" %}
**Required license:** Enterprise

**Required global permission:**

* Manage access to Tonic Structural and to any workspace
* View organization users. This permission is only required for the Tonic Structural application. It is not needed when you use the Structural API.
  {% endhint %}

From the **Global Permission Sets** list, you can grant or revoke access to a global permission set. Global permission sets can be assigned to individual users and to SSO groups.

Access to workspace permission sets is managed from **Workspaces** view. For more information, go to [workspace-sharing](https://docs.tonic.ai/app/workspace/workspace-access-management/workspace-sharing "mention").

You cannot change the assignment of the following global permission sets:

* The global permission set that is assigned to all Structural users. Initially, this is the General User permission set, but [it can be changed to a different permission set](https://docs.tonic.ai/app/admin/tonic-user-access/permission-sets-default#permission-set-default-global).
* The built-in Admin (Environment) global permission set.

Before you assign a global permission set to an SSO group, make sure that you are aware of who is in the group. The permissions that are granted to an SSO group automatically are granted to all of the users in the group. For information on how to configure Structural to filter the allowed SSO groups, go to [sso-limit-groups](https://docs.tonic.ai/app/admin/tonic-user-access/single-sign-on/sso-limit-groups "mention").

To manage the permission set assignment:

<figure><img src="https://3378426797-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LSQCLFQ4bslJ-HYc8c3%2Fuploads%2Folp5ChwOMVoMh6UnTzJ6%2FGlobalPermissionSetAccess.png?alt=media&#x26;token=d3b7487f-47a0-4c0d-99bd-acd83e6e902a" alt=""><figcaption><p>Panel to manage access to a global permission set</p></figcaption></figure>

1. On the **Global Permission Sets** list, for the permission set to manage, click **Manage Access**.
2. To grant access to a user or group:
   1. Begin to type the user or group name.
   2. In the list of matching users or groups, click the user or group name.
3. To remove access from a user or group, click **Undo** for that user or group.
4. To save the changes to the permission set access, click **Save**.