> For a complete page index, fetch https://docs.synthflow.ai/llms.txt. For full documentation content, fetch https://docs.synthflow.ai/llms-full.txt.

# Manage Permissions

> Control which actions and capabilities are available to agency subaccounts through permission settings.

![Subaccount permissions tabs](https://files.buildwithfern.com/synthflow.docs.buildwithfern.com/91e1e1b403e785ecd63888d4fce98174261ffde0796095bae8a157e8a07fcf12/docs/assets/screenshots/agency_permissions.png)

If you want to enable or disable specific actions for all or certain subaccounts, you can do that in your Agency dashboard. For example, you can only allow select subaccounts to buy phone numbers or deploy agents.

<Steps>
  <Step>
    On the left-hand sidebar, click <Icon icon="fa-regular fa-buildings" /> **Agency**.
  </Step>

  <Step>
    On the navigation sidebar, click **Permissions**.
  </Step>

  <Step>
    You can change permissions in each tab for each of your subaccounts. To enable or disable a permission for all subaccounts, check or uncheck **Select all**.
  </Step>
</Steps>

## Default Permissions

New subaccounts inherit the permissions from the most recently created subaccount.

## General Permissions

General permissions allow agencies to manage access to top-level functionalities. The **API field** column shows the value to use when granting or revoking each permission through the [Subaccounts API](/api-reference/platform-api/subaccounts/update-subaccount):

| Permission                    | API field        | Description                                                         |
| ----------------------------- | ---------------- | ------------------------------------------------------------------- |
| **Agents**                    | `assistants`     | Allows creating agents (always enabled).                            |
| **Knowledge Base**            | `knowledge_base` | Grants access to knowledge bases.                                   |
| **Actions**                   | `actions`        | Grants access to the actions repository.                            |
| **Workflows**                 | `workflows`      | Grants access to the workflows page.                                |
| **Contacts**                  | `contacts`       | Grants access to contacts, including Memory Groups and Phone Books. |
| **Phone Numbers**             | `phone_numbers`  | Grants access to phone numbers, including Addresses.                |
| **Analytics**                 | `analytics`      | Allows subaccounts to view the analytics dashboard.                 |
| **Test Center (Simulations)** | `simulations`    | Allows access to call simulations and evaluations.                  |
| **Logs**                      | `logs`           | Provides access to call, chat, API, and webhook logs.               |
| **Invite Members**            | —                | Enables subaccounts to invite and manage team members. UI only.     |

## Agent Types

Agent-type permissions control which kinds of agents a subaccount can create and manage. Each type can be granted or revoked independently through the [Subaccounts API](/api-reference/platform-api/subaccounts/update-subaccount):

| Permission          | API field  | Description                                            |
| ------------------- | ---------- | ------------------------------------------------------ |
| **Inbound agents**  | `inbound`  | Allows the subaccount to create inbound voice agents.  |
| **Outbound agents** | `outbound` | Allows the subaccount to create outbound voice agents. |
| **Widget agents**   | `widget`   | Allows the subaccount to create web widget agents.     |
| **Chat agents**     | `chat`     | Allows the subaccount to create chat agents.           |

## Agents' Capabilities

These capabilities refer to the configuration options available for an agent:

| Capability     | Description                                                                                        |
| -------------- | -------------------------------------------------------------------------------------------------- |
| **Configure**  | Access to core agent settings such as the AI model, knowledge base, voice, and call configuration. |
| **Prompt**     | Access to the prompt editor and call flow designer.                                                |
| **Actions**    | Allows attaching actions for pre-call, during-call, and post-call events.                          |
| **Deployment** | Allows attaching phone numbers, assigning memory groups, and configuring webhook URLs.             |
| **Calls**      | Provides access to the agent’s call history.                                                       |

## Integrations

Integration permissions let subaccounts use their own API keys for third-party integrations:

| Integration     | Description                                                    |
| --------------- | -------------------------------------------------------------- |
| **Twilio**      | Import phone numbers directly from a Twilio account.           |
| **ElevenLabs**  | Import custom voices from an ElevenLabs account.               |
| **GoHighLevel** | Book appointments via GHL and create custom actions.           |
| **HubSpot**     | Create HubSpot custom actions and sync information extractors. |
| **Cal.com**     | Book appointments using a Cal.com account.                     |
| **Salesforce**  | Create custom actions connected to Salesforce.                 |

## Actions

Controls which actions subaccounts can create and attach to agents.
To understand what each type of action does, please refer to the [Actions documentation](/actions-overview).