diff --git a/config/permissions/user.permissions.anonymous.yml b/config/permissions/user.permissions.anonymous.yml
new file mode 100644
index 0000000000000000000000000000000000000000..806af1903d2dbfd1bff75c2af9e19f9e9a2991b2
--- /dev/null
+++ b/config/permissions/user.permissions.anonymous.yml
@@ -0,0 +1,2 @@
+id: anonymous
+permissions: {  }
diff --git a/config/permissions/user.permissions.authenticated.yml b/config/permissions/user.permissions.authenticated.yml
new file mode 100644
index 0000000000000000000000000000000000000000..9798a13e943e68063621f00ab3303e4f65d1ea7a
--- /dev/null
+++ b/config/permissions/user.permissions.authenticated.yml
@@ -0,0 +1,2 @@
+id: authenticated
+permissions: {  }
diff --git a/config/permissions/user.permissions.content_admin.yml b/config/permissions/user.permissions.content_admin.yml
new file mode 100644
index 0000000000000000000000000000000000000000..c4a2b1ec4d94200d84b8ebc37b1b4b428a9593e5
--- /dev/null
+++ b/config/permissions/user.permissions.content_admin.yml
@@ -0,0 +1,2 @@
+id: content_admin
+permissions: {  }
diff --git a/config/permissions/user.permissions.editor.yml b/config/permissions/user.permissions.editor.yml
new file mode 100644
index 0000000000000000000000000000000000000000..d878d47950deb0a2516b3094dfd6e0861ce545b2
--- /dev/null
+++ b/config/permissions/user.permissions.editor.yml
@@ -0,0 +1,2 @@
+id: editor
+permissions: {  }
diff --git a/config/permissions/user.permissions.seo_admin.yml b/config/permissions/user.permissions.seo_admin.yml
new file mode 100644
index 0000000000000000000000000000000000000000..90ab0329b6d8a85b37dbeae583e820f4d27017f2
--- /dev/null
+++ b/config/permissions/user.permissions.seo_admin.yml
@@ -0,0 +1,2 @@
+id: seo_admin
+permissions: {  }
diff --git a/config/permissions/user.permissions.site_admin.yml b/config/permissions/user.permissions.site_admin.yml
new file mode 100644
index 0000000000000000000000000000000000000000..79c7ddc9a22aa379ce8bd3ccb1229bb48c7ff481
--- /dev/null
+++ b/config/permissions/user.permissions.site_admin.yml
@@ -0,0 +1,3 @@
+id: site_admin
+permissions:
+  - 'administer varbase media header'
diff --git a/varbase_media_header.install b/varbase_media_header.install
index 02f220f466d09dc754c98d202bd58710ba82d909..a150fce884657556d3e40faa69915f01294e34f2 100755
--- a/varbase_media_header.install
+++ b/varbase_media_header.install
@@ -28,6 +28,9 @@ function varbase_media_header_install() {
     ->getInstanceFromDefinition(EntityDefinitionUpdateManager::class)
     ->applyUpdates();
 
+  // Add permissions.
+  ModuleInstallerFactory::addPermissions('varbase_media_header');
+
 }
 
 /**