> For a complete page index, fetch https://docs.synthflow.ai/llms.txt. For full documentation content, fetch https://docs.synthflow.ai/llms-full.txt.

# Permissions

> Control which actions, agent types, Agent Editor options, and integrations are available to agency subaccounts through permission settings.

![Subaccount permissions tabs](https://storage.googleapis.com/granular-changelog/doc-images/agency_permissions.png)

If you want to enable or disable specific actions for all or certain subaccounts, you can do that in **Admin**. For example, you can only allow select subaccounts to buy phone numbers or deploy agents.

Open **Admin** from the main sidebar. Under **Partner**, click **Permissions**.

You can change permissions in each tab for each of your subaccounts. To enable or disable a permission for all subaccounts, check or uncheck **Select all**.

## Default Permissions

New subaccounts inherit the permissions from the most recently created subaccount.

## General Permissions

General permissions allow agencies to manage access to top-level functionalities. The **API field** column shows the value to use when granting or revoking each permission through the [Subaccounts API](/api-reference/platform-api/subaccounts/update-subaccount):

| Permission                    | API field        | Description                                                         |
| ----------------------------- | ---------------- | ------------------------------------------------------------------- |
| **Agents**                    | `assistants`     | Allows creating agents (always enabled).                            |
| **Knowledge Base**            | `knowledge_base` | Grants access to knowledge bases.                                   |
| **Actions**                   | `actions`        | Grants access to the actions repository.                            |
| **Workflows**                 | `workflows`      | Grants access to the workflows page.                                |
| **Contacts**                  | `contacts`       | Grants access to contacts, including Memory Groups and Phone Books. |
| **Phone Numbers**             | `phone_numbers`  | Grants access to phone numbers, including Addresses.                |
| **Analytics**                 | `analytics`      | Allows subaccounts to view the analytics dashboard.                 |
| **Test Center (Simulations)** | `simulations`    | Allows access to call simulations and evaluations.                  |
| **Logs**                      | `logs`           | Provides access to call, chat, API, and webhook logs.               |
| **Invite Members**            | —                | Enables subaccounts to invite and manage team members. UI only.     |

## Agent Types

Agent-type permissions control which kinds of agents a subaccount can create and manage. Each type can be granted or revoked independently through the [Subaccounts API](/api-reference/platform-api/subaccounts/update-subaccount):

| Permission          | API field  | Description                                            |
| ------------------- | ---------- | ------------------------------------------------------ |
| **Inbound agents**  | `inbound`  | Allows the subaccount to create inbound voice agents.  |
| **Outbound agents** | `outbound` | Allows the subaccount to create outbound voice agents. |
| **Widget agents**   | `widget`   | Allows the subaccount to create web widget agents.     |
| **Chat agents**     | `chat`     | Allows the subaccount to create chat agents.           |

## Agent Editor

These permissions control the configuration options available in the agent editor:

| Capability     | Description                                                                                        |
| -------------- | -------------------------------------------------------------------------------------------------- |
| **Configure**  | Access to core agent settings such as the AI model, knowledge base, voice, and call configuration. |
| **Prompt**     | Access to the prompt editor and call flow designer.                                                |
| **Actions**    | Allows attaching actions for pre-call, during-call, and post-call events.                          |
| **Deployment** | Allows attaching phone numbers, assigning memory groups, and configuring webhook URLs.             |
| **Calls**      | Provides access to the agent’s call history.                                                       |

## Integrations

Integration permissions let subaccounts use their own API keys for third-party integrations:

| Integration     | Description                                                    |
| --------------- | -------------------------------------------------------------- |
| **Twilio**      | Import phone numbers directly from a Twilio account.           |
| **ElevenLabs**  | Import custom voices from an ElevenLabs account.               |
| **GoHighLevel** | Book appointments via GHL and create custom actions.           |
| **HubSpot**     | Create HubSpot custom actions and sync information extractors. |
| **Cal.com**     | Book appointments using a Cal.com account.                     |
| **Salesforce**  | Create custom actions connected to Salesforce.                 |

## Actions

Controls which actions subaccounts can create and attach to agents.
To understand what each type of action does, please refer to the [Actions documentation](/actions-overview).