> ## Documentation Index
> Fetch the complete documentation index at: https://docs.msportal.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Company Permission Groups

> Set up permission groups to control what company users can access

Company Permission Groups define what your clients' users can access when they log into MSPortal. These groups determine which modules, data, and actions are available to company users.

## Understanding Permission Groups

Permission Groups are different from both tenant roles and company roles:

| Concept               | For                    | Purpose                                                        |
| --------------------- | ---------------------- | -------------------------------------------------------------- |
| **Tenant Roles**      | Your internal MSP team | Control staff access to MSPortal features                      |
| **Permission Groups** | Your clients' users    | Control company user access to the portal                      |
| **Company Roles**     | Your clients' users    | Organizational labels (job titles) — do **not** control access |

<Note>
  Permission Groups control access. [Company Roles](/user-guides/getting-started/onboarding/company-roles) are just organizational labels. A user is assigned both independently.
</Note>

## What You'll Configure

* **Group Names** - Create groups like "Full Access", "Standard User", "View Only"
* **Module Access** - Which modules company users can see (Tickets, Training, Devices, etc.)
* **Permission Levels** - What actions users can take: Read, Write, or Manage
* **Ticket Display Groups** - Which ticket categories are visible to this group
* **Default Group** - Which group is automatically assigned to new users

## Steps to Complete

<Steps>
  <Step title="Navigate to Permission Groups">
    Click **Go to Settings** in the onboarding wizard, or go to **Settings > Companies > Permissions**.
  </Step>

  <Step title="Review Default Groups">
    MSPortal includes built-in global permission groups. Review these to understand the structure.
  </Step>

  <Step title="Create Custom Groups (Optional)">
    Click **Create Permission Group** to create a new group for specific client needs.
  </Step>

  <Step title="Configure Module Access">
    For each group, select the permission level (Read, Write, or Manage) for each module.
  </Step>

  <Step title="Save Changes">
    Click **Save** after configuring each permission group.
  </Step>
</Steps>

## Permission Levels

Each module supports three levels of access:

| Level      | Description                                             |
| ---------- | ------------------------------------------------------- |
| **Read**   | View data only                                          |
| **Write**  | Create and edit records (includes Read)                 |
| **Manage** | Full control including delete (includes Read and Write) |

## Common Permission Group Examples

<CardGroup cols={2}>
  <Card title="Full Access" icon="lock-open">
    Access to all available modules. Can view and manage their company's data.
  </Card>

  <Card title="Standard User" icon="user">
    Access to tickets, training, and basic features. Cannot manage company settings.
  </Card>

  <Card title="Training Only" icon="graduation-cap">
    Limited to training courses and compliance acknowledgments.
  </Card>

  <Card title="View Only" icon="eye">
    Can view information but cannot create or modify anything.
  </Card>
</CardGroup>

## Available Modules for Company Users

* **Tickets** - Submit and view support tickets
* **Training** - Access training courses and track progress
* **Devices** - View device inventory (if enabled)
* **Compliance** - View compliance status and complete tasks
* **Dashboard** - Access company dashboard
* **Meetings** - View and manage meetings
* **Goals** - View and track goals

## Manual Completion

This step requires **manual completion**. Click **Mark Complete** in the wizard when you've finished setting up your permission groups.

<Tip>
  Start with fewer, broader permission groups. You can always create more specific groups later as you understand your clients' needs.
</Tip>

## Related Documentation

* [Companies Settings](/user-guides/settings/companies) - Full companies settings reference including all four tabs
* [Company Roles](/user-guides/getting-started/onboarding/company-roles) - Organizational role setup (next step)