diff --git a/atst/domain/permission_sets.py b/atst/domain/permission_sets.py
index 1336bc92..51a91d2e 100644
--- a/atst/domain/permission_sets.py
+++ b/atst/domain/permission_sets.py
@@ -17,6 +17,7 @@ class PermissionSets(object):
     EDIT_PORTFOLIO_ADMIN = "edit_portfolio_admin"
     PORTFOLIO_POC = "portfolio_poc"
     VIEW_AUDIT_LOG = "view_audit_log"
+    EDIT_CCPO_USERS = "edit_ccpo_users"
 
     VIEW_APPLICATION = "view_application"
     EDIT_APPLICATION_ENVIRONMENTS = "edit_application_environments"
@@ -56,7 +57,17 @@ ATAT_PERMISSION_SETS = [
         "display_name": "View Audit Log",
         "description": "",
         "permissions": [Permissions.VIEW_AUDIT_LOG],
-    }
+    },
+    {
+        "name": PermissionSets.EDIT_CCPO_USERS,
+        "display_name": "View Audit Log",
+        "description": "",
+        "permissions": [
+            Permissions.VIEW_CCPO_USER,
+            Permissions.EDIT_CCPO_USER,
+            Permissions.DELETE_CCPO_USER,
+        ],
+    },
 ]
 
 _PORTFOLIO_BASIC_PERMISSION_SETS = [
diff --git a/atst/models/permissions.py b/atst/models/permissions.py
index 75991a64..a7d735b8 100644
--- a/atst/models/permissions.py
+++ b/atst/models/permissions.py
@@ -1,5 +1,9 @@
 class Permissions(object):
+    # ccpo permissions
     VIEW_AUDIT_LOG = "view_audit_log"
+    VIEW_CCPO_USER = "view_ccpo_user"
+    EDIT_CCPO_USER = "edit_ccpo_user"
+    DELETE_CCPO_USER = "delete_ccpo_user"
 
     # base portfolio perms
     VIEW_PORTFOLIO = "view_portfolio"
diff --git a/atst/routes/__init__.py b/atst/routes/__init__.py
index ab919d74..9e138aca 100644
--- a/atst/routes/__init__.py
+++ b/atst/routes/__init__.py
@@ -132,6 +132,12 @@ def activity_history():
     return render_template("audit_log/audit_log.html", audit_events=audit_events)
 
 
+@bp.route("/ccpo-users")
+@user_can(Permissions.VIEW_CCPO_USER, message="view ccpo users")
+def ccpo_users():
+    return render_template("ccpo/users.html")
+
+
 @bp.route("/about")
 def about():
     return render_template("about.html")
diff --git a/atst/routes/dev.py b/atst/routes/dev.py
index aeb3cff0..2885ffbd 100644
--- a/atst/routes/dev.py
+++ b/atst/routes/dev.py
@@ -31,6 +31,7 @@ _ALL_PERMS = [
     PermissionSets.EDIT_PORTFOLIO_ADMIN,
     PermissionSets.PORTFOLIO_POC,
     PermissionSets.VIEW_AUDIT_LOG,
+    PermissionSets.EDIT_CCPO_USERS,
 ]
 
 
diff --git a/templates/ccpo/users.html b/templates/ccpo/users.html
new file mode 100644
index 00000000..459d1554
--- /dev/null
+++ b/templates/ccpo/users.html
@@ -0,0 +1,9 @@
+{% extends "base.html" %}
+
+{% block content %}
+<div class='col'>
+
+  CCPO Stuff goes here
+
+</div>
+{% endblock %}
diff --git a/tests/test_access.py b/tests/test_access.py
index eefa2160..01692ac3 100644
--- a/tests/test_access.py
+++ b/tests/test_access.py
@@ -120,6 +120,16 @@ def test_atst_activity_history_access(get_url_assert_status):
     get_url_assert_status(rando, url, 404)
 
 
+# atst.ccpo_users
+def test_atst_ccpo_users_access(get_url_assert_status):
+    ccpo = user_with(PermissionSets.EDIT_CCPO_USERS)
+    rando = user_with()
+
+    url = url_for("atst.ccpo_users")
+    get_url_assert_status(ccpo, url, 200)
+    get_url_assert_status(rando, url, 404)
+
+
 # applications.access_environment
 def test_applications_access_environment_access(get_url_assert_status):
     dev = UserFactory.create()