# About permission sets

Tonic Structural uses permissions and permission sets to manage role-based access (RBAC) to Structural features and functions.

A [permission](https://docs.tonic.ai/app/admin/tonic-user-access/permissions/available-permissions) grants access to a specific feature or function.

A permission set is a collection of permissions that can be assigned to a user or an SSO group.

## **Built-in and custom permission sets** <a href="#permission-sets-about-builtin-custom" id="permission-sets-about-builtin-custom"></a>

Structural provides a set of [built-in permission sets](https://docs.tonic.ai/app/admin/tonic-user-access/permissions/permission-sets-builtin) that you cannot edit or delete.

The Enterprise license plan also allows you to create [custom permission sets](https://docs.tonic.ai/app/admin/tonic-user-access/permissions/custom-permission-sets-configuration).

## **Global permission sets** <a href="#permission-sets-about-global" id="permission-sets-about-global"></a>

Global permission sets control access to features and functions that are outside of the context of a specific workspace. For example, global permissions control who can manage users and configure environment settings.

For the lists of built-in global permission sets and available permissions, go to [#permission-sets-builtin-global](https://docs.tonic.ai/app/admin/tonic-user-access/permission-sets-builtin#permission-sets-builtin-global "mention") and [#permissions-global](https://docs.tonic.ai/app/admin/tonic-user-access/available-permissions#permissions-global "mention").

For information on how to assign global permission sets, go to [global-permission-set-access](https://docs.tonic.ai/app/admin/tonic-user-access/permissions/global-permission-set-access "mention") and [managing-admin-users](https://docs.tonic.ai/app/admin/tonic-user-access/permissions/managing-admin-users "mention").

You can also [select a default global permission set to assign to all new users](https://docs.tonic.ai/app/admin/tonic-user-access/permission-sets-default#permission-set-default-global).

## **Workspace permission sets** <a href="#permission-sets-about-workspace" id="permission-sets-about-workspace"></a>

Workspace permission sets provide access to specific workspace management features and functions.

Workspace permission sets are assigned to users and groups within the context of a specific workspace. For example, a user might have the Editor permission set in one workspace and the Viewer permission set in another workspace.

For the lists of built-in workspace permission sets and available permissions, go to [#permission-sets-builtin-workspace](https://docs.tonic.ai/app/admin/tonic-user-access/permission-sets-builtin#permission-sets-builtin-workspace "mention") and [#available-workspace-permissions](https://docs.tonic.ai/app/admin/tonic-user-access/available-permissions#available-workspace-permissions "mention").

For information on how to assign workspace permission sets, go to [workspace-sharing](https://docs.tonic.ai/app/workspace/workspace-access-management/workspace-sharing "mention").

You can also [select a default workspace permission set to assign to workspace owners](https://docs.tonic.ai/app/admin/tonic-user-access/permission-sets-default#permission-set-default-workspace-owner).