Skip to main content
The Entitlements tab is your central control panel for managing role-based permissions. It allows you to customize access levels for different admin users, ensuring appropriate system access based on organizational roles and responsibilities.
Entitlements are only available for Admin users. Regular users do not have entitlements.
Admin Entitlements

How Entitlements Work

Every admin action in Pria is governed by a permission verb in the format module.action. When a user tries to perform an action (e.g., editing an assistant), the system checks whether their membership includes the corresponding verb (e.g., assistants.edit).
Entitlements apply to users with the Admin account type and control which admin features they can access.

Account Types

Account TypeScopeEntitlements
UserRegular userCannot access admin dashboard. No entitlements needed.
AdminInstitution-level adminActions gated by assigned entitlements. Must be assigned to an institution.
A user’s global account type (set in User Management) must be Admin to access the admin dashboard. Setting someone as Admin in Entitlements alone is not sufficient — both the global type and institution membership role must be Admin.

Permission Modules

Entitlements are organized into 8 modules, each with up to 4 actions:
ModuleDescriptionAvailable Actions
InstitutionsInstance settings, branding, integrations, MCP servers, onboarding questionslist, add, edit, delete
UsersUser management, password resets, impersonationlist, add, edit, delete
SessionsSession tracking and compliance datalist, edit, delete
HistoriesConversation logs, analytics charts, weekly usagelist, add, edit, delete
FeedbacksUser feedback and ratingslist, edit, delete
AssistantsShared and personal assistant managementlist, add, edit, delete
AI ModelsCustom AI model configurationslist, add, edit, delete
PaymentsCredit purchase and payment recordslist

Complete Permission Reference

There are 27 permission verbs in total:
PermissionAllows
institutions.listView institution list and settings
institutions.addCreate new institutions, clone existing ones
institutions.editModify settings, branding, OAuth, MCP servers, manage entitlements
institutions.deleteDelete institutions
institutions.edit is the gatekeeper for the Entitlements page itself. A user needs this permission to manage other users’ entitlements.

Managing Entitlements

Inline Editing

The Entitlements page provides inline editing — all changes are made directly in the list view without navigating to a separate edit page. Each row represents a user’s membership in an institution and displays:
  • User email and name
  • Role dropdown — Change account type (User, Admin)
  • Status dropdown — Change membership status (Active, Pending, Suspended)
  • Permission checkboxes — Toggle individual permissions on or off

Quick Actions

Use the “All” checkbox to toggle all 27 permissions on or off at once. This is useful when granting full admin access to a trusted administrator.
Click the lock icon to apply a Read-Only preset. This grants:
  • All .list permissions (view access to every module)
  • All .edit permissions except institutions.edit
This preset is ideal for teaching assistants or support staff who need to view data and make minor edits but should not manage institution settings or other users’ permissions.
Use the module dropdown to show or hide permission columns by module. This is helpful when you only need to manage permissions for a specific area (e.g., just Assistants or just Histories).

Filtering Users

FilterDescription
AccountFilter by parent account (useful for multi-institution setups)
InstitutionFilter by specific institution
Account TypeShow only Users or Admins
User SearchSearch by email, first name, or last name
Result LimitCap the number of results (default: 100)

Account Manager Role

The Account Manager role provides scoped access to manage multiple institutions within an account. This role is configured by the Praxis AI team and is separate from the standard entitlement system.
To request Account Manager access for your organization, contact humans@praxis-ai.com.

Auto-Granting Entitlements

Entitlements can be automatically granted to new admin users under certain conditions:
1

entitleNewAdmins Flag

When an institution has Entitle New Admins enabled, any user who joins with an Admin account type automatically receives all 27 permissions.
2

Contact Email List

Users whose email appears in the institution’s Contact Email list automatically receive full permissions, regardless of the entitleNewAdmins setting.
3

Institution Creation

When you create or clone an institution, the creating user automatically receives full permissions for that institution.

Enrollment

The Register Users tab (available on the Entitlements page) allows administrators to auto-enroll eligible users into an institution with appropriate entitlements. This is useful for bulk onboarding of faculty or staff who need admin access.

Common Configurations

Grant selective read access:
  • histories.list — View student conversation history
  • feedbacks.list — View student feedback
  • sessions.list — View session data
  • assistants.list — View available assistants
Do not grant institutions.edit, users.edit, or any .delete permissions.
Grant assistant and content management:
  • assistants.list, assistants.add, assistants.edit, assistants.delete
  • aimodels.list
  • histories.list
Do not grant institutions.* or users.* permissions.
Use the “All” checkbox to grant all 27 permissions. This gives complete access to all admin functions within the assigned institution.

  • User Management — Managing user accounts and account types
  • Configuration — Institution settings that affect entitlements
  • Sessions — Session tracking controlled by session entitlements