Disclosed are examples of systems, apparatus, methods and computer program products for managing user permissions in relation to system events occurring in a database system. In some implementations, a server can listen for system events. Based on at least one system event criterion, a system event can be determined to occur. A user can be identified as matching a user criterion. A permission set can be identified as matching a permission criterion. Based on a permission set, a permission may be added, updated, or removed from a user.