> For the complete documentation index, see [llms.txt](https://docs.tonic.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.tonic.ai/app/admin/tonic-user-access/permissions/global-permissions/global-permission-built-in.md).

# Built-in global permission sets and available permissions

## Built-in global permission sets <a href="#permission-sets-builtin-global" id="permission-sets-builtin-global"></a>

Structural comes with the following built-in global permission sets.

### Admin

For self-hosted instances only.

Provides complete access to all global permissions.

The Admin permission set automatically receives any new global permissions.

### Admin (Environment)

For self-hosted instances only.

Identical to the Admin permission set.

Only assigned to users and groups listed in the value of the [environment setting](/app/admin/environment-variables-setting.md) `TONIC_ADMINISTRATORS`.

### General User

Allows users to create workspaces.

Also allows them to find other users in the organization, which is needed to share and transfer workspace, and to configure access to global permission sets.

By default, the General User permission set is assigned to all Structural users and SSO groups.

### Account Admin

For Structural Cloud only.

An Account Admin is associated with a Structural Cloud organization.

An Account Admin can remove and reset user passwords for the users in the organization. They can also manage access to any workspace for the organization, set organization settings, and download the usage report.

## Available global permissions <a href="#permissions-global" id="permissions-global"></a>

The following tables list the available global permissions, and indicate how the permissions apply to the built-in global permission sets.

### User management permissions <a href="#permissions-global-user-management" id="permissions-global-user-management"></a>

<table data-full-width="false"><thead><tr><th width="167" valign="top">Permission</th><th width="138.33333333333331" valign="top">General User</th><th width="293" valign="top">Admin and Admin (Environment)</th><th width="151.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Create and manage custom permission sets</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Manage user access to Tonic Structural and to any workspace</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Reset Tonic Structural user passwords</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr></tbody></table>

### Workspace management permissions <a href="#permissions-global-workspace-management" id="permissions-global-workspace-management"></a>

<table><thead><tr><th width="177" valign="top">Permission</th><th width="139.33333333333331" valign="top">General User</th><th width="277" valign="top">Admin and Admin (Environment)</th><th width="156.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Create workspaces</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">View organization users</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Copy any workspace</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr></tbody></table>

### Tonic administration permissions <a href="#permissions-global-tonic-administration" id="permissions-global-tonic-administration"></a>

<table><thead><tr><th width="177" valign="top">Permission</th><th width="135.33333333333331" valign="top">General User</th><th width="285" valign="top">Admin and Admin (Environment)</th><th width="146.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Update the Tonic Structural license key</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Update Tonic Structural</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">View summary usage metrics</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Enable diagnostic logging and uploading logs directly to Tonic.ai</td><td valign="top"></td><td valign="top">✔️</td><td valign="top">✔️</td></tr></tbody></table>

### Configuration management permissions <a href="#permissions-global-configuration-management" id="permissions-global-configuration-management"></a>

<table><thead><tr><th width="179" valign="top">Permission</th><th width="135.33333333333331" valign="top">General User</th><th width="275.546875" valign="top">Admin and Admin (Environment)</th><th width="157.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Create and manage generator presets</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Create and manage sensitivity rules</td><td valign="top"></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Configure Tonic Structural data encryption</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Manage environment settings</td><td valign="top"></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Manage secrets managers</td><td valign="top"></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Manage organization settings</td><td valign="top"></td><td valign="top"></td><td valign="top">✔️</td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.tonic.ai/app/admin/tonic-user-access/permissions/global-permissions/global-permission-built-in.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.