The perms command controls authorization: which commanders can send commands to a set of controlled actors. It is intended to be wrapped by a GUI.
The basic scheme is to control access from programs to actors, and to have few actors be controlled -- roughly speaking the instruments and the telescope. When a new user connection (from a TUI, say) is established, it assumes the permissions which already exist for its program; if that program has not yet been registered with perms, the user will not be able to send commands to any actor controlled by perms. The perms command itself can by default only be commanded by APO users.
In simpler terms, a user can command an actor if at least one of the following is true: