diff --git a/atst/domain/permission_sets.py b/atst/domain/permission_sets.py
index 1336bc92..ab55feac 100644
--- a/atst/domain/permission_sets.py
+++ b/atst/domain/permission_sets.py
@@ -17,6 +17,7 @@ class PermissionSets(object):
     EDIT_PORTFOLIO_ADMIN = "edit_portfolio_admin"
     PORTFOLIO_POC = "portfolio_poc"
     VIEW_AUDIT_LOG = "view_audit_log"
+    MANAGE_CCPO_USERS = "manage_ccpo_users"
 
     VIEW_APPLICATION = "view_application"
     EDIT_APPLICATION_ENVIRONMENTS = "edit_application_environments"
@@ -56,7 +57,17 @@ ATAT_PERMISSION_SETS = [
         "display_name": "View Audit Log",
         "description": "",
         "permissions": [Permissions.VIEW_AUDIT_LOG],
-    }
+    },
+    {
+        "name": PermissionSets.MANAGE_CCPO_USERS,
+        "display_name": "View Audit Log",
+        "description": "",
+        "permissions": [
+            Permissions.VIEW_CCPO_USER,
+            Permissions.EDIT_CCPO_USER,
+            Permissions.DELETE_CCPO_USER,
+        ],
+    },
 ]
 
 _PORTFOLIO_BASIC_PERMISSION_SETS = [
diff --git a/atst/domain/users.py b/atst/domain/users.py
index daf69c68..a75a1f28 100644
--- a/atst/domain/users.py
+++ b/atst/domain/users.py
@@ -28,6 +28,10 @@ class Users(object):
 
         return user
 
+    @classmethod
+    def get_ccpo_users(cls):
+        return db.session.query(User).filter(User.permission_sets != None).all()
+
     @classmethod
     def create(cls, dod_id, permission_sets=None, **kwargs):
         if permission_sets:
diff --git a/atst/models/permissions.py b/atst/models/permissions.py
index 75991a64..a7d735b8 100644
--- a/atst/models/permissions.py
+++ b/atst/models/permissions.py
@@ -1,5 +1,9 @@
 class Permissions(object):
+    # ccpo permissions
     VIEW_AUDIT_LOG = "view_audit_log"
+    VIEW_CCPO_USER = "view_ccpo_user"
+    EDIT_CCPO_USER = "edit_ccpo_user"
+    DELETE_CCPO_USER = "delete_ccpo_user"
 
     # base portfolio perms
     VIEW_PORTFOLIO = "view_portfolio"
diff --git a/atst/routes/__init__.py b/atst/routes/__init__.py
index ab919d74..0729d878 100644
--- a/atst/routes/__init__.py
+++ b/atst/routes/__init__.py
@@ -132,6 +132,13 @@ def activity_history():
     return render_template("audit_log/audit_log.html", audit_events=audit_events)
 
 
+@bp.route("/ccpo-users")
+@user_can(Permissions.VIEW_CCPO_USER, message="view ccpo users")
+def ccpo_users():
+    users = Users.get_ccpo_users()
+    return render_template("ccpo/users.html", users=users)
+
+
 @bp.route("/about")
 def about():
     return render_template("about.html")
diff --git a/atst/routes/dev.py b/atst/routes/dev.py
index aeb3cff0..ed7adc43 100644
--- a/atst/routes/dev.py
+++ b/atst/routes/dev.py
@@ -31,6 +31,7 @@ _ALL_PERMS = [
     PermissionSets.EDIT_PORTFOLIO_ADMIN,
     PermissionSets.PORTFOLIO_POC,
     PermissionSets.VIEW_AUDIT_LOG,
+    PermissionSets.MANAGE_CCPO_USERS,
 ]
 
 
diff --git a/templates/ccpo/users.html b/templates/ccpo/users.html
new file mode 100644
index 00000000..f3d545de
--- /dev/null
+++ b/templates/ccpo/users.html
@@ -0,0 +1,27 @@
+{% extends "base.html" %}
+
+{% block content %}
+<div class='col'>
+  <div class="h2">
+    CCPO Users
+  </div>
+  <table>
+    <thead>
+      <tr>
+        <th>Name</th>
+        <th>Email</th>
+        <th>DoD ID</th>
+      </tr>
+    </thead>
+    <tbody>
+      {% for user in users %}
+        <tr>
+          <td>{{ user.full_name }}</td>
+          <td>{{ user.email }}</td>
+          <td>{{ user.dod_id }}</td>
+        </tr>
+      {% endfor %}
+    </tbody>
+  </table>
+</div>
+{% endblock %}
diff --git a/tests/domain/test_users.py b/tests/domain/test_users.py
index 116e5294..fda69a12 100644
--- a/tests/domain/test_users.py
+++ b/tests/domain/test_users.py
@@ -74,3 +74,14 @@ def test_update_user_with_last_login():
     last_login = new_user.last_login
     Users.update_last_login(new_user)
     assert new_user.last_login > last_login
+
+
+def test_get_ccpo_users():
+    ccpo_1 = UserFactory.create_ccpo()
+    ccpo_2 = UserFactory.create_ccpo()
+    rando = UserFactory.create()
+
+    ccpo_users = Users.get_ccpo_users()
+    assert ccpo_1 in ccpo_users
+    assert ccpo_2 in ccpo_users
+    assert rando not in ccpo_users
diff --git a/tests/test_access.py b/tests/test_access.py
index eefa2160..3a311894 100644
--- a/tests/test_access.py
+++ b/tests/test_access.py
@@ -120,6 +120,16 @@ def test_atst_activity_history_access(get_url_assert_status):
     get_url_assert_status(rando, url, 404)
 
 
+# atst.ccpo_users
+def test_atst_ccpo_users_access(get_url_assert_status):
+    ccpo = user_with(PermissionSets.MANAGE_CCPO_USERS)
+    rando = user_with()
+
+    url = url_for("atst.ccpo_users")
+    get_url_assert_status(ccpo, url, 200)
+    get_url_assert_status(rando, url, 404)
+
+
 # applications.access_environment
 def test_applications_access_environment_access(get_url_assert_status):
     dev = UserFactory.create()