Skip to main content
One thing, three names. In these docs we call your assistant a Digital Twin. You will also see it called an Instance — on the Instance Settings panel, in the admin Instances list, and in your web address (your-instance.praxislxp.com) — and an Institution, which is what our software calls it behind the scenes (in API fields such as institution). All three mean exactly the same thing: one assistant, with its own knowledge, voice, members and settings. Which name you see depends on the screen you are on, not on what the thing is. An Account is different — it is the organisation that owns one or more Digital Twins.
The Entitlements tab is your central control panel for managing role-based permissions. It allows you to customize access levels for different admin users, ensuring appropriate system access based on organizational roles and responsibilities.
Entitlements are only available for Admin users. Regular users do not have entitlements.
Admin Entitlements

​
How Entitlements Work

Each thing an admin can do has a name made of two parts: the area, then the action — assistants.edit means “change assistants”. Before any admin action runs, Pria checks that this person has been given that exact permission on this Digital Twin, through their membership (the record that links a person to a Digital Twin).
Entitlements apply to users with the Admin account type and control which admin features they can access.

​
Account Types

Being marked Admin here is only half the job. The person’s account itself must also be set to Admin under User Management, and their membership role on the Digital Twin must be Admin. If either one says User, they cannot open the admin dashboard.

​
Permission Modules

Entitlements are organized into 10 modules, each with up to 4 actions:

​
Complete Permission Reference

There are 35 permission verbs in total:
institutions.edit is the gatekeeper for the Entitlements page itself. A user needs this permission to manage other users’ entitlements.

​
Managing Entitlements

​
Inline Editing

The Entitlements page provides inline editing — all changes are made directly in the list view without navigating to a separate edit page. Each row represents a user’s membership in a Digital Twin and displays:
  • User email and name
  • Role dropdown — Change account type (User, Admin)
  • Status dropdown — Change membership status (Active, Pending, Suspended)
  • Credit Consumed — How many credits this member has consumed, so you can spot heavy consumers in a pooled Digital Twin
  • Permission checkboxes — Toggle individual permissions on or off

​
Membership Status Enforcement

Membership status directly controls whether a user can interact with AI features. The platform enforces status checks on every AI request:
Status enforcement is immediate — changing a user’s membership status to Pending or Suspended blocks their AI access on the next request. No logout or session refresh is required.
Personal accounts (users who belong to no Digital Twin) are not subject to membership status checks. Their access is controlled by their account-level status instead.

​
Quick Actions

Use the “All” checkbox to toggle all 35 permissions on or off at once. This is useful when granting full admin access to a trusted administrator.
Click the lock icon to apply a Read-Only preset. Despite the name, it allows edits everywhere except Digital Twin settings and other people’s permissions. It grants:
  • All .list permissions (view access to every module)
  • All .edit permissions except institutions.edit
This preset is ideal for teaching assistants or support staff who need to view data and make minor edits but should not manage Digital Twin settings or other people’s permissions.
Use the Filter buttons (one per module) to show only the permission columns of the areas you are working on — just Assistants, say, or just Histories.
The trash icon on a row removes that membership — the person loses access to that Digital Twin. Tick several rows to remove them together; the confirmation shows the count. Removal cannot be undone.

​
Filtering Users

The list loads more rows as you scroll. Columns chooses what the table shows, and Export CSV downloads the list for your current filters.

​
Account Manager Role

The Account Manager role provides scoped access to manage several Digital Twins inside one Account. This role is configured by the Praxis AI team and is separate from the standard entitlement system.
To request Account Manager access for your organization, contact humans@praxis-ai.com.

​
Auto-Granting Entitlements

Entitlements can be automatically granted to new admin users under certain conditions:
1

Grant Entitlements to New Admins

When a Digital Twin has Grant Entitlements to New Admins enabled, any user who joins with an Admin account type automatically receives all 35 permissions.
2

Contact Email List

Users whose email appears in the Digital Twin’s Contact Emails list automatically receive full permissions, regardless of the Grant Entitlements to New Admins setting.
3

Creating a Digital Twin

When you create or clone a Digital Twin, you automatically receive full permissions for it.

​
Enrollment

The Enroll tab (shown on the Entitlements page when a Digital Twin is selected and you hold users.add) lists the people who already belong to another Digital Twin of the same account but not yet to this one. Search by name or email, tick the people (or Select All), choose the account type and entitlements they get, then select Enroll Selected. Useful for onboarding faculty or staff who need admin access.

​
Common Configurations

Grant selective read access:
  • histories.list — View student conversation history
  • feedbacks.list — View student feedback
  • sessions.list — View session data
  • assistants.list — View available assistants
Do not grant institutions.edit, users.edit, or any .delete permissions.
Grant assistant and content management:
  • assistants.list, assistants.add, assistants.edit, assistants.delete
  • aimodels.list
  • histories.list
Do not grant institutions.* or users.* permissions.
Use the “All” checkbox to grant all 35 permissions. This gives complete access to all admin functions within the assigned Digital Twin.
  • User Management — Managing user accounts and account types
  • Configuration — Digital Twin settings that affect entitlements
  • Sessions — Session tracking controlled by session entitlements
  • SSO Providers — OAuth 2.0 Single Sign-On configuration (requires SSO entitlements)