# Control Provisioned Permissions

Some third-party tools may limit which permission levels can be provisioned automatically. In those cases, unsupported permissions will fall back to manual provisioning based on the policy applied to the app.

#### Selecting Provisioned Permissions

1. Open the configuration panel of the corresponding app (see [here](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/how-it-works/activate-agent-cake)) and click the `Enabled permissions` field.

![](https://ajeuwbhvhr.cloudimg.io/https://colony-recorder.s3.amazonaws.com/files/2025-07-15/b06847b4-6e1f-4170-9b7f-f597f335102d/ascreenshot.jpeg?tl_px=507,307\&br_px=2983,1692\&force_format=jpeg\&q=100\&width=1120.0\&wat=1\&wat_opacity=0.7\&wat_gravity=northwest\&wat_url=https://colony-recorder.s3.us-west-1.amazonaws.com/images/watermarks/FB923C_standard.png\&wat_pad=848,310)

2. Select the permissions you want to enable for auto-provisioning. Permissions that can’t be auto-provisioned will appear as disabled.

![](https://ajeuwbhvhr.cloudimg.io/https://colony-recorder.s3.amazonaws.com/files/2025-07-15/0c875927-5185-416d-a17f-a49fd1689107/ascreenshot.jpeg?tl_px=507,307\&br_px=2983,1692\&force_format=jpeg\&q=100\&width=1120.0\&wat=1\&wat_opacity=0.7\&wat_gravity=northwest\&wat_url=https://colony-recorder.s3.us-west-1.amazonaws.com/images/watermarks/FB923C_standard.png\&wat_pad=826,356)