Skip to main content
The Entitlements tab is your central control panel for managing role-based permissions. It allows you to customize access levels for different admin users, ensuring appropriate system access based on organizational roles and responsibilities.
Entitlements are only available for Admin users. Regular users do not have entitlements.
Admin Entitlements

​
How Entitlements Work

Every admin action in Pria is governed by a permission verb in the format module.action. When a user tries to perform an action (e.g., editing an assistant), the system checks whether their membership includes the corresponding verb (e.g., assistants.edit).
Entitlements apply to users with the Admin account type and control which admin features they can access.

​
Account Types

A user’s global account type (set in User Management) must be Admin to access the admin dashboard. Setting someone as Admin in Entitlements alone is not sufficient — both the global type and institution membership role must be Admin.

​
Permission Modules

Entitlements are organized into 10 modules, each with up to 4 actions:

​
Complete Permission Reference

There are 35 permission verbs in total:
institutions.edit is the gatekeeper for the Entitlements page itself. A user needs this permission to manage other users’ entitlements.

​
Managing Entitlements

​
Inline Editing

The Entitlements page provides inline editing — all changes are made directly in the list view without navigating to a separate edit page. Each row represents a user’s membership in an institution and displays:
  • User email and name
  • Role dropdown — Change account type (User, Admin)
  • Status dropdown — Change membership status (Active, Pending, Suspended)
  • Credit Consumed — How many credits this member has consumed, so you can spot heavy consumers in a pooled instance
  • Permission checkboxes — Toggle individual permissions on or off

​
Membership Status Enforcement

Membership status directly controls whether a user can interact with AI features. The platform enforces status checks on every AI request:
Status enforcement is immediate — changing a user’s membership status to Pending or Suspended blocks their AI access on the next request. No logout or session refresh is required.
Personal accounts (users without an institution) are not subject to membership status checks. Their access is controlled by their account-level status instead.

​
Quick Actions

Use the “All” checkbox to toggle all 35 permissions on or off at once. This is useful when granting full admin access to a trusted administrator.
Click the lock icon to apply a Read-Only preset. This grants:
  • All .list permissions (view access to every module)
  • All .edit permissions except institutions.edit
This preset is ideal for teaching assistants or support staff who need to view data and make minor edits but should not manage institution settings or other users’ permissions.
Use the module dropdown to show or hide permission columns by module. This is helpful when you only need to manage permissions for a specific area (e.g., just Assistants or just Histories).

​
Filtering Users

​
Account Manager Role

The Account Manager role provides scoped access to manage multiple institutions within an account. This role is configured by the Praxis AI team and is separate from the standard entitlement system.
To request Account Manager access for your organization, contact humans@praxis-ai.com.

​
Auto-Granting Entitlements

Entitlements can be automatically granted to new admin users under certain conditions:
1

entitleNewAdmins Flag

When an institution has Entitle New Admins enabled, any user who joins with an Admin account type automatically receives all 35 permissions.
2

Contact Email List

Users whose email appears in the institution’s Contact Email list automatically receive full permissions, regardless of the entitleNewAdmins setting.
3

Institution Creation

When you create or clone an institution, the creating user automatically receives full permissions for that institution.

​
Enrollment

The Register Users tab (available on the Entitlements page) allows administrators to auto-enroll eligible users into an institution with appropriate entitlements. This is useful for bulk onboarding of faculty or staff who need admin access.

​
Common Configurations

Grant selective read access:
  • histories.list — View student conversation history
  • feedbacks.list — View student feedback
  • sessions.list — View session data
  • assistants.list — View available assistants
Do not grant institutions.edit, users.edit, or any .delete permissions.
Grant assistant and content management:
  • assistants.list, assistants.add, assistants.edit, assistants.delete
  • aimodels.list
  • histories.list
Do not grant institutions.* or users.* permissions.
Use the “All” checkbox to grant all 35 permissions. This gives complete access to all admin functions within the assigned institution.
  • User Management — Managing user accounts and account types
  • Configuration — Institution settings that affect entitlements
  • Sessions — Session tracking controlled by session entitlements
  • SSO Providers — OAuth 2.0 Single Sign-On configuration (requires SSO entitlements)