diff --git a/prlp.permissions.yml b/prlp.permissions.yml
new file mode 100644
index 0000000..57d6a2e
--- /dev/null
+++ b/prlp.permissions.yml
@@ -0,0 +1,4 @@
+administer prlp settings:
+  title: 'Administer PRLP settings'
+  description: 'Allow to manage Password Reset Landing Page (PRLP) settings.'
+  restrict access: TRUE
diff --git a/prlp.routing.yml b/prlp.routing.yml
index 50988c4..e6edee5 100644
--- a/prlp.routing.yml
+++ b/prlp.routing.yml
@@ -4,6 +4,6 @@ prlp.prlp_admin_settings:
     _form: '\Drupal\prlp\Form\AdminSettingsForm'
     _title: 'PRLP settings'
   requirements:
-    _permission: 'administer users'
+    _permission: 'administer prlp settings'
   options:
     _admin_route: TRUE