Setting Permissions through Design/Change-Time Policy
You can include the Set Permissions action in a design/change-time policy to set instance-level permissions on a policy. You can use this action to automatically assign permissions to a policy during any of the following events:
Post-Create
Pre-State Change
Post-State Change
OnTrigger