> For the complete documentation index, see [llms.txt](https://docs.api.intratool.de/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.api.intratool.de/introduction/entity-permissions.md).

# Entity Permissions

[EntityPermissions](/api-reference/entity-permissions.md) are a layer of permissions directly applied on user generated contents and are one core part of the intratool permission handling. While middlewares keep track of user privileges on application level, [EntityPermissions](/api-reference/entity-permissions.md) provide a way to describe content level permissions.

Contents that should only be interactable by a user or a group of users, are attached to [EntityPermissions](/api-reference/entity-permissions.md) by the intratool API and checked when retrieving data from an endpoint.

In that way, the structure of how permissions are stored and checked for contents is the same for all entities that utilize the [EntityPermissions](/api-reference/entity-permissions.md).

## Topics

* [**Restricted Scope**](/introduction/entity-permissions/restricted-scope.md): How permissions affect data retrieval and query restrictions.