---
title: "Add or edit permission set"
slug: "add-or-edit-permission-set-1"
tags: ["Product Usage", "ePolicy Orchestrator – On-prem", "ePO 5.10.x", "ePO 5.10.0"]
updated: 2026-09-07T17:46:26Z
published: 2026-09-07T17:46:26Z
canonical: "docs.trellix.com/add-or-edit-permission-set-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Add or edit permission set

Control user access by creating and changing permission sets from the **Permission Sets** page.

You can also copy and delete permission sets from the **Permission Sets** page.

1. Open the **Permission Sets** page: select **Menu** → **User Management** → **Permission Sets**.
2. Select one of these actions.

  - Add a permission set:

    1. Click **New Permission Set**.
    2. Type a unique name for the new permission set.
    3. To immediately assign specific users to this permission set, select their user names in the **Users** section.
    4. To map any Active Directory or Entra ID groups to this permission set, select the server from the **Server Name** list, then click **Add**.
    5. If you added any Active Directory servers that you want to remove, select them in the Active Directory list box, then click **Remove**.

The XML file contains only roles with a defined level of permissions. If, for example, a **Permission Set** has no permissions for queries and reports, no entry appears in the file.
  - Edit a permission set:

    1. Select a permission set to change.
    2. Type a unique name for the new permission set.
    3. To immediately assign specific users to this permission set, select their user names in the **Users** section.
    4. To map any Active Directory groups to this permission set, select the server from the **Server Name** list, then click **Add**.
    5. If you added any Active Directory servers that you want to remove, select them in the Active Directory list box, then click **Remove**.
  - Enable tag permissions for non-administrator users

Perform these steps to prevent authorization errors when non-administrator users run the **System.Find** command. This is required after you upgrade to ePO - On-prem 5.10.x Service Pack 1 Update 6.

    1. Select the permission set assigned to the non-administrator users.
    2. In the list of categories, click **Edit** next to the **Systems** category.
    3. Locate the **Tag use** section.
    4. Select the **Apply**, **exclude**, and **clear** tags checkbox.
    5. Click **Save**.

> [!NOTE]
> Note
> 
> Affected users must log off and log on again for these changes to take effect. For more information, see [KB15218](https://thrive.trellix.com/s/article/000015218).