# User Permissions - Access Controls

Once you have onboarded users into your Organization, you can customize their accesses to the account by adding additional permissions. These are an additional level of permissions, on top of the *User Type* that they have been added as.

### Organization-level Permissions <a href="#organization-level-permissions" id="organization-level-permissions"></a>

The below Organization-level entities can be managed by enabling the checkboxes against the users:

1. Users
2. Teams
3. API Tokens
4. Webhooks
5. Extensions
6. Postmortem Templates
7. Audit Logs
8. Organization Analytics
9. Feature Settings
10. Billing

<figure><img src="https://1574591692-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8TaWz01jmUJl58p4ZVel%2Fuploads%2Fgit-blob-e1155eafb60410d3e00f94134211ffa5083e40bf%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

### Understanding Organization Level Permissions <a href="#understanding-organization-level-permissions" id="understanding-organization-level-permissions"></a>

These Organization Level specific entity permissions can be assigned only to <mark style="color:red;">`Account Owners`</mark> and <mark style="color:red;">`Users`</mark>.

| Permission Type               | What it means                                             | User Types who can be assigned these |
| ----------------------------- | --------------------------------------------------------- | ------------------------------------ |
| Manage Users                  | Add, Delete users                                         | Account Owner, User                  |
| Manage Teams                  | Create Teams                                              | Account Owner, User                  |
| Manage API Tokens             | Create, Revoke API Tokens for all users                   | Account Owner, User                  |
| Manage Webhooks               | Add, Edit Webhooks                                        | Account Owner, User                  |
| Manage Extensions             | Enable, Disable Extensions                                | Account Owner, User                  |
| Manage Audit Logs             | View Audit Logs                                           | Account Owner, User                  |
| Manage Organisation Analytics | View Organisation Analytics                               | Account Owner, User                  |
| Manage Postmortem Templates   | Create & Modify Templates, set Default Template           | Account Owner, User                  |
| Feature Settings              | Enable and Disable Organisation-level feature settings    | Account Owner, User                  |
| Access and manage Billing     | Access, Manage Billing and Card Details in Billing Portal | Account Owner, User                  |

{% hint style="warning" %}
**Important:**

* `Account Owners` have all of these permissions by default.
* You cannot assign any permissions to a `Stakeholder` type of user by default.
  {% endhint %}

*Have any questions?* [*Ask the community*](https://community.squadcast.com/view/home)*.*