# Permissions

The "Permissions" section in Datome serves as a tool designed to provide precise control over user access to models and their assets. Whether you hold an admin or model admin role, this section equips you to establish Access Control Lists (ACLs), shaping interactions with your data.

To set a new rule:

1. Navigate to the "Permissions" section on the sidebar.
2. Click on "Add new rule".
3. Fill in the Rule details:
   * **Rule Name:** Assign a name to the rule.
   * **Models:** Select the target model for the rule.
   * **Groups:** Specify the groups affected by the rule. Note that each selection will affect the selected group and all its subgroups.
4. Select the action that the rule will enforce (accept/deny) by setting yes/no under the section "View".
5. Set the conditions that determine when the Visibility Rule should be applied. Conditions are based on asset properties or states. Here's how to define conditions:
   * **Add Condition:** Click on the "Add Condition" button fro the list of Actions.
   * **States:** Select the states required for the rule.
   * **Property:** Click on "Add new property" and choose the property of the asset you want to set a condition on (e.g. quantity).
   * **Operator:** Select a logical operator for the condition (e.g., equals, not equals).
   * **Value:** Specify the value that the property should match for the condition to be met.
6. Click on "Save".

All rules within Datome operate under the logical "OR" condition, meaning that if any of the defined conditions are met, the rule will be applied.

All conditions added within a Visibility Rule are defined with the logical "AND" operator. This ensures that all specified conditions must be met simultaneously for the rule to take effect.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://doc.datome.io/permissions.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
