public void DefinePermissions(IPermissionDefinitionContext context) { //Get existing root permission group 'Administration' var administration = context.GetRootGroupOrNull("Abp.Zero.Administration"); //Create 'Role management' permission under 'Administration' group var roleManegement = administration.CreatePermission("Abp.Zero.Administration.RoleManagement", new LocalizableString("RoleManagement", "AbpZero")); //Create 'Create role' (to be able to create a new role) permission as child of 'Role management' permission. roleManegement.CreateChildPermission("Abp.Zero.Administration.RoleManagement.CreateRole", new LocalizableString("CreateRole", "AbpZero")); }