diff --git a/atst/domain/roles.py b/atst/domain/roles.py
index 25c08e8a..b11d2552 100644
--- a/atst/domain/roles.py
+++ b/atst/domain/roles.py
@@ -140,6 +140,24 @@ WORKSPACE_ROLES = [
             Permissions.VIEW_WORKSPACE,
         ],
     },
+    {
+        "name": "contracting_officer",
+        "description": "Can approve funding for a task order. Has view and edit permissions for task orders in a workspace.",
+        "display_name": "Contracting Officer",
+        "permissions": [Permissions.VIEW_WORKSPACE, Permissions.KO_SIGN_TASK_ORDER],
+    },
+    {
+        "name": "contracting_officer_representative",
+        "description": "Assists in submitting task order documents. Can update Task Order.",
+        "display_name": "Contracting Officer Representative",
+        "permissions": [Permissions.VIEW_WORKSPACE],
+    },
+    {
+        "name": "security_officer",
+        "description": "Can edit security questions for a task order.",
+        "display_name": "Contracting Officer",
+        "permissions": [Permissions.VIEW_WORKSPACE, Permissions.SO_SIGN_TASK_ORDER],
+    },
 ]
 
 
diff --git a/atst/models/permissions.py b/atst/models/permissions.py
index f7adc406..112517a3 100644
--- a/atst/models/permissions.py
+++ b/atst/models/permissions.py
@@ -42,3 +42,6 @@ class Permissions(object):
 
     ADD_TAG_TO_WORKSPACE = "add_tag_to_workspace"
     REMOVE_TAG_FROM_WORKSPACE = "remove_tag_from_workspace"
+
+    KO_SIGN_TASK_ORDER = "ko_sign_task_order"
+    SO_SIGN_TASK_ORDER = "so_sign_task_order"