diff --git a/aleksis/apps/alsijil/schema/extra_marks.py b/aleksis/apps/alsijil/schema/extra_marks.py
index be062b7ed3248a6836c45ee0d4d75616ed65fa54..67a7c7096277d86f1662ebf54875e02a0c7386d2 100644
--- a/aleksis/apps/alsijil/schema/extra_marks.py
+++ b/aleksis/apps/alsijil/schema/extra_marks.py
@@ -29,6 +29,7 @@ class ExtraMarkBatchCreateMutation(BaseBatchCreateMutation):
         model = ExtraMark
         fields = ("short_name", "name", "colour_fg", "colour_bg", "show_in_coursebook")
         optional_fields = ("name",)
+        permissions = ("alsijil.create_extramark_rule",)
 
     @classmethod
     def check_permissions(cls, root, info, input):  # noqa
@@ -40,6 +41,7 @@ class ExtraMarkBatchCreateMutation(BaseBatchCreateMutation):
 class ExtraMarkBatchDeleteMutation(BaseBatchDeleteMutation):
     class Meta:
         model = ExtraMark
+        permissions = ("alsijil.create_extramark_rule",)
 
     @classmethod
     def check_permissions(cls, root, info, input):  # noqa
@@ -52,6 +54,7 @@ class ExtraMarkBatchPatchMutation(BaseBatchPatchMutation):
     class Meta:
         model = ExtraMark
         fields = ("id", "short_name", "name", "colour_fg", "colour_bg", "show_in_coursebook")
+        permissions = ("alsijil.create_extramark_rule",)
 
     @classmethod
     def check_permissions(cls, root, info, input):  # noqa
diff --git a/aleksis/apps/alsijil/schema/participation_status.py b/aleksis/apps/alsijil/schema/participation_status.py
index bb90b9bea09a01e13fdbcc693104c471c8cd6d3d..3b7fbe8b346eb783f0ecb265df6b6f84a34c23ab 100644
--- a/aleksis/apps/alsijil/schema/participation_status.py
+++ b/aleksis/apps/alsijil/schema/participation_status.py
@@ -86,6 +86,7 @@ class ParticipationStatusBatchPatchMutation(BaseBatchPatchMutation):
             "tardiness",
         )  # Only the reason and tardiness can be updated after creation
         return_field_name = "participationStatuses"
+        permissions = ("alsijil.edit_participation_status_for_documentation_with_time_range_rule",)
 
     @classmethod
     def check_permissions(cls, root, info, input, *args, **kwargs):  # noqa: A002