# Matter Permissions
When a new matter is created the default permissions from the Security settings are applied.
# Private or Default
To allow users to make a matter private, set the ShowUsersGroupsPermissions to Visible/Required. Users can select users and/or roles based on the setting ShowUsersGroupsPermissionsFilterType.
When users/roles are selected, the matter is marked as 'private' and only the selected user (and the current login user, responsible- and billingtimekeeper) have ChangePermissions on the matter. The current login user, responsible- and billingtimekeeper are also automatic added when removed. Specify additional users/roles names via the setting ShowUsersGroupsPermissionsAdditional, the specified users/roles get OwnerPermissions on the matter. With ShowUsersGroupsPermissionsAdditionalReadPermissions you can add users/roles to get "reading" permissions on the matter.
When no users/roles are selected, the default security from the Security settings is applied.
All mentioned settings can be found in the "matter settings" in the CRM configuration.