Using a Design/Change-Time Policy to Set Permissions
You can include the Set Permissions action in a design/change-time policy to set instance-level permissions on a policy. You can use this action to automatically assign permissions to a policy during any of the following events:

Post-Create

Pre-State Change

Post-State Change

OnTrigger
For more information about using the Set Permissions action, see the description of this action in the CentraSite Developer’s Guide.