> For the complete documentation index, see [llms.txt](https://docs.tonic.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.tonic.ai/app/structural-user-access/permissions/global-permissions/global-permission-built-in.md).

# Built-in global permission sets and available permissions

## Built-in global permission sets <a href="#permission-sets-builtin-global" id="permission-sets-builtin-global"></a>

Structural comes with the following built-in global permission sets.

### Admin

For self-hosted instances only.

Provides complete access to all global permissions.

The Admin permission set automatically receives any new global permissions.

### Admin (Environment)

For self-hosted instances only.

Identical to the Admin permission set.

Only assigned to users and groups listed in the value of the [environment setting](/app/admin/environment-variables-setting.md) `TONIC_ADMINISTRATORS`.

### General User

The General User permission set does not contain any permissions. It identifies a user as a member of an organization.

By default, the General User permission set is assigned to all Structural users and SSO groups.

### Account Admin

For Structural Cloud only.

An Account Admin is associated with a Structural Cloud organization.

An Account Admin can remove and reset user passwords for the users in the organization. They can also manage access to any workspace for the organization, set organization settings, and download the usage report.

## Available global permissions <a href="#permissions-global" id="permissions-global"></a>

The following tables list the available global permissions, and indicate how the permissions apply to the built-in global permission sets.

### User management permissions <a href="#permissions-global-user-management" id="permissions-global-user-management"></a>

<table data-full-width="false"><thead><tr><th width="269.6015625" valign="top">Permission</th><th width="293" valign="top">Admin and Admin (Environment)</th><th width="151.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Create and manage custom permission sets (global)</td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Manage user access to Tonic Structural</td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">View organization users</td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Reset Tonic Structural user passwords</td><td valign="top">✔️</td><td valign="top">✔️</td></tr></tbody></table>

### Tonic administration permissions <a href="#permissions-global-tonic-administration" id="permissions-global-tonic-administration"></a>

<table><thead><tr><th width="303.9296875" valign="top">Permission</th><th width="285" valign="top">Admin and Admin (Environment)</th><th width="146.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Update the Tonic Structural license key</td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Update Tonic Structural</td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">View summary usage metrics</td><td valign="top">✔️</td><td valign="top">✔️</td></tr></tbody></table>

### Configuration management permissions <a href="#permissions-global-configuration-management" id="permissions-global-configuration-management"></a>

<table><thead><tr><th width="292.8046875" valign="top">Permission</th><th width="275.546875" valign="top">Admin and Admin (Environment)</th><th width="157.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Configure Tonic Structural data encryption</td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Manage environment settings</td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Manage organization settings</td><td valign="top"></td><td valign="top">✔️</td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.tonic.ai/app/structural-user-access/permissions/global-permissions/global-permission-built-in.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.