diff --git a/src/authorization/Actions.ts b/src/authorization/Actions.ts
index 267add0..b7c25d3 100644
--- a/src/authorization/Actions.ts
+++ b/src/authorization/Actions.ts
@@ -6,6 +6,7 @@ export default {
   'APP_UPDT_PRODUCT_STORE_CONFG': 'APP_UPDT_PRODUCT_STORE_CONFG',
   'APP_SUPER_USER': 'APP_SUPER_USER',
   'APP_SECURITY_GROUP_CREATE': 'APP_SECURITY_GROUP_CREATE',
+  'APP_PERMISSION_CREATE': 'APP_PERMISSION_CREATE',
   'APP_PERMISSION_UPDATE': 'APP_PERMISSION_UPDATE',
   'APP_PERMISSION_VIEW': 'APP_PERMISSION_VIEW',
   'APP_USER_CREATE': 'APP_USER_CREATE'
diff --git a/src/authorization/Rules.ts b/src/authorization/Rules.ts
index f49187e..47d073c 100644
--- a/src/authorization/Rules.ts
+++ b/src/authorization/Rules.ts
@@ -6,7 +6,8 @@ export default {
   'APP_UPDT_PASSWORD': 'SECURITY_CREATE OR SECURITY_ADMIN',
   'APP_UPDT_PRODUCT_STORE_CONFG': 'SECURITY_CREATE OR SECURITY_ADMIN',
   'APP_SECURITY_GROUP_CREATE': 'SECURITY_CREATE OR SECURITY_ADMIN',
-  'APP_PERMISSION_UPDATE': 'SECURITY_CREATE OR SECURITY_ADMIN',
+  'APP_PERMISSION_CREATE': 'SECURITY_CREATE OR SECURITY_ADMIN',
+  'APP_PERMISSION_UPDATE': 'SECURITY_UPDATE OR SECURITY_ADMIN',
   'APP_PERMISSION_VIEW': 'SECURITY_VIEW OR SECURITY_ADMIN',
   'APP_SUPER_USER': 'WEBTOOLS_VIEW',
   'USERS_APP_VIEW': 'USERS_APP_VIEW'
diff --git a/src/components/PermissionItems.vue b/src/components/PermissionItems.vue
index 9a01ff0..afded98 100644
--- a/src/components/PermissionItems.vue
+++ b/src/components/PermissionItems.vue
@@ -35,7 +35,7 @@
               <ion-card-title>{{ permission.permissionId }}</ion-card-title>
               <ion-card-subtitle>{{ permission.description }}</ion-card-subtitle>
             </div>
-            <ion-checkbox :disabled="!hasPermission(Actions.APP_PERMISSION_UPDATE)" :checked="permission.isChecked" @click="updatePermissionAssociation($event, permission)" />
+            <ion-checkbox :disabled="permission.isChecked ? !hasPermission(Actions.APP_PERMISSION_UPDATE) : !hasPermission(Actions.APP_PERMISSION_CREATE)" :checked="permission.isChecked" @click="updatePermissionAssociation($event, permission)" />
           </ion-card-header>
         </ion-card>
       </section>