diff --git a/application/views/scripts/security/index.phtml b/application/views/scripts/security/index.phtml
new file mode 100644
index 000000000..6a4e17fda
--- /dev/null
+++ b/application/views/scripts/security/index.phtml
@@ -0,0 +1,42 @@
+<div class="content">
+    <div>
+        <h1><?= $this->translate('Permissions') ?></h1>
+        <?php /** @var \Icinga\Application\Config $permissions */ if ($permissions->isEmpty()): ?>
+            <?= $this->translate('No permissions found.') ?>
+        <?php else: ?>
+            <table class="action" data-base-target="_next">
+                <thead>
+                <tr>
+                    <th><?= $this->translate('Name') ?></th>
+                    <th><?= $this->translate('Permissions') ?></th>
+                    <th><?= $this->translate('Users') ?></th>
+                    <th><?= $this->translate('Groups') ?></th>
+                </tr>
+                </thead>
+                <tbody>
+                <?php foreach ($permissions as $name => $permission): /** @var object $permission */ ?>
+                    <tr>
+                        <td>
+                            <?= $this->escape($name) ?>
+                            <div class="hidden">
+                                <a href="<?= $this->url('security/update-permission', array('permission' => $name)) ?>"></a>
+                            </div>
+                        </td>
+                        <td><?= $this->escape($permission->permissions) ?></td>
+                        <td><?= $this->escape($permission->users) ?></td>
+                        <td><?= $this->escape($permission->groups) ?></td>
+                        <td>
+                            <a href="<?= $this->url('security/remove-permission', array('permission' => $name)) ?>">
+                                <?= $this->translate('Remove permission') ?>
+                            </a>
+                        </td>
+                    </tr>
+                <?php endforeach ?>
+                </tbody>
+            </table>
+        <?php endif ?>
+        <a data-base-target="_next" href="<?= $this->href('security/new-permission') ?>">
+            <?= $this->translate('Grant Permissions') ?>
+        </a>
+    </div>
+</div>
diff --git a/application/views/scripts/security/new-permission.phtml b/application/views/scripts/security/new-permission.phtml
new file mode 100644
index 000000000..52b3badfd
--- /dev/null
+++ b/application/views/scripts/security/new-permission.phtml
@@ -0,0 +1,4 @@
+<div class="content">
+    <h1><?= $this->translate('New Permission') ?></h1>
+    <?= $form ?>
+</div>
diff --git a/application/views/scripts/security/remove-permission.phtml b/application/views/scripts/security/remove-permission.phtml
new file mode 100644
index 000000000..6841681f2
--- /dev/null
+++ b/application/views/scripts/security/remove-permission.phtml
@@ -0,0 +1,4 @@
+<div class="content">
+    <h1><?= sprintf($this->translate('Remove Permission %s'), $name) ?></h1>
+    <?= $form ?>
+</div>
diff --git a/application/views/scripts/security/update-permission.phtml b/application/views/scripts/security/update-permission.phtml
new file mode 100644
index 000000000..e7c45fe66
--- /dev/null
+++ b/application/views/scripts/security/update-permission.phtml
@@ -0,0 +1,4 @@
+<div class="content">
+    <h1><?= sprintf($this->translate('Update Permission %s'), $name) ?></h1>
+    <?= $form ?>
+</div>