Entitlements are only available for Admin users. Regular users do not have entitlements.

How Entitlements Work
Every admin action in Pria is governed by a permission verb in the formatmodule.action. When a user tries to perform an action (e.g., editing an assistant), the system checks whether their membership includes the corresponding verb (e.g., assistants.edit).
Entitlements apply to users with the Admin account type and control which admin features they can access.
Account Types
| Account Type | Scope | Entitlements |
|---|---|---|
| User | Regular user | Cannot access admin dashboard. No entitlements needed. |
| Admin | Institution-level admin | Actions gated by assigned entitlements. Must be assigned to an institution. |
Permission Modules
Entitlements are organized into 8 modules, each with up to 4 actions:| Module | Description | Available Actions |
|---|---|---|
| Institutions | Instance settings, branding, integrations, MCP servers, onboarding questions | list, add, edit, delete |
| Users | User management, password resets, impersonation | list, add, edit, delete |
| Sessions | Session tracking and compliance data | list, edit, delete |
| Histories | Conversation logs, analytics charts, weekly usage | list, add, edit, delete |
| Feedbacks | User feedback and ratings | list, edit, delete |
| Assistants | Shared and personal assistant management | list, add, edit, delete |
| AI Models | Custom AI model configurations | list, add, edit, delete |
| Payments | Credit purchase and payment records | list |
Complete Permission Reference
There are 27 permission verbs in total:- Institutions
- Users
- Sessions
- Histories
- Feedbacks
- Assistants
- AI Models
- Payments
| Permission | Allows |
|---|---|
institutions.list | View institution list and settings |
institutions.add | Create new institutions, clone existing ones |
institutions.edit | Modify settings, branding, OAuth, MCP servers, manage entitlements |
institutions.delete | Delete institutions |
institutions.edit is the gatekeeper for the Entitlements page itself. A user needs this permission to manage other users’ entitlements.Managing Entitlements
Inline Editing
The Entitlements page provides inline editing — all changes are made directly in the list view without navigating to a separate edit page. Each row represents a user’s membership in an institution and displays:- User email and name
- Role dropdown — Change account type (User, Admin)
- Status dropdown — Change membership status (Active, Pending, Suspended)
- Permission checkboxes — Toggle individual permissions on or off
Quick Actions
Grant All Permissions
Grant All Permissions
Use the “All” checkbox to toggle all 27 permissions on or off at once. This is useful when granting full admin access to a trusted administrator.
Read-Only Preset
Read-Only Preset
Click the lock icon to apply a Read-Only preset. This grants:
- All
.listpermissions (view access to every module) - All
.editpermissions exceptinstitutions.edit
Module Filtering
Module Filtering
Use the module dropdown to show or hide permission columns by module. This is helpful when you only need to manage permissions for a specific area (e.g., just Assistants or just Histories).
Filtering Users
| Filter | Description |
|---|---|
| Account | Filter by parent account (useful for multi-institution setups) |
| Institution | Filter by specific institution |
| Account Type | Show only Users or Admins |
| User Search | Search by email, first name, or last name |
| Result Limit | Cap the number of results (default: 100) |
Account Manager Role
The Account Manager role provides scoped access to manage multiple institutions within an account. This role is configured by the Praxis AI team and is separate from the standard entitlement system.To request Account Manager access for your organization, contact humans@praxis-ai.com.
Auto-Granting Entitlements
Entitlements can be automatically granted to new admin users under certain conditions:entitleNewAdmins Flag
When an institution has Entitle New Admins enabled, any user who joins with an Admin account type automatically receives all 27 permissions.
Contact Email List
Users whose email appears in the institution’s Contact Email list automatically receive full permissions, regardless of the entitleNewAdmins setting.
Enrollment
The Register Users tab (available on the Entitlements page) allows administrators to auto-enroll eligible users into an institution with appropriate entitlements. This is useful for bulk onboarding of faculty or staff who need admin access.Common Configurations
Teaching Assistant
Teaching Assistant
Grant selective read access:
histories.list— View student conversation historyfeedbacks.list— View student feedbacksessions.list— View session dataassistants.list— View available assistants
institutions.edit, users.edit, or any .delete permissions.Content Manager
Content Manager
Grant assistant and content management:
assistants.list,assistants.add,assistants.edit,assistants.deleteaimodels.listhistories.list
institutions.* or users.* permissions.Full Administrator
Full Administrator
Use the “All” checkbox to grant all 27 permissions. This gives complete access to all admin functions within the assigned institution.
Related
- User Management — Managing user accounts and account types
- Configuration — Institution settings that affect entitlements
- Sessions — Session tracking controlled by session entitlements