diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt
index 2afca46c0..be387e0e3 100644
--- a/src/CMakeLists.txt
+++ b/src/CMakeLists.txt
@@ -171,6 +171,7 @@ set(
   manage_license.c
   manage_openvas.c
   manage_osp.c
+  manage_permissions.c
   manage_port_lists.c
   manage_preferences.c
   manage_resources.c
@@ -183,6 +184,7 @@ set(
   manage_tls_certificates.c
   manage_utils.c
   manage_migrators.c
+  manage_permissions.c
   manage_pg.c
   manage_scan_handler.c
   manage_scan_queue.c
@@ -214,6 +216,7 @@ set(
   manage_sql_groups.c
   manage_sql_nvts.c
   manage_sql_secinfo.c
+  manage_sql_permissions.c
   manage_sql_port_lists.c
   manage_sql_configs.c
   manage_sql_report_configs.c
@@ -675,6 +678,7 @@ set(
   "${CMAKE_CURRENT_SOURCE_DIR}/manage_get.c"
   "${CMAKE_CURRENT_SOURCE_DIR}/manage_groups.c"
   "${CMAKE_CURRENT_SOURCE_DIR}/manage_oci_image_targets.c"
+  "${CMAKE_CURRENT_SOURCE_DIR}/manage_permissions.c"
   "${CMAKE_CURRENT_SOURCE_DIR}/manage_port_lists.c"
   "${CMAKE_CURRENT_SOURCE_DIR}/manage_preferences.c"
   "${CMAKE_CURRENT_SOURCE_DIR}/manage_runtime_flags.c"
@@ -691,6 +695,7 @@ set(
   "${CMAKE_CURRENT_SOURCE_DIR}/manage_sql_configs.c"
   "${CMAKE_CURRENT_SOURCE_DIR}/manage_sql_nvts.c"
   "${CMAKE_CURRENT_SOURCE_DIR}/manage_sql_oci_image_targets.c"
+  "${CMAKE_CURRENT_SOURCE_DIR}/manage_sql_permissions.c"
   "${CMAKE_CURRENT_SOURCE_DIR}/manage_sql_port_lists.c"
   "${CMAKE_CURRENT_SOURCE_DIR}/manage_sql_report_formats.c"
   "${CMAKE_CURRENT_SOURCE_DIR}/manage_sql_roles.c"
diff --git a/src/gmp_get.c b/src/gmp_get.c
index b1fc8e2c4..cce9b609b 100644
--- a/src/gmp_get.c
+++ b/src/gmp_get.c
@@ -14,6 +14,7 @@
 #include "gmp_base.h"
 #include "manage_acl.h"
 #include "manage_filters.h"
+#include "manage_permissions.h"
 
 #include <stdlib.h>
 #include <string.h>
diff --git a/src/manage.h b/src/manage.h
index dcbb98562..2f344f1a7 100644
--- a/src/manage.h
+++ b/src/manage.h
@@ -2897,9 +2897,6 @@ copy_permission (const char*, const char *, permission_t *);
 char*
 permission_uuid (permission_t);
 
-int
-permission_is_admin (const char *);
-
 int
 permission_in_use (permission_t);
 
diff --git a/src/manage_permissions.c b/src/manage_permissions.c
new file mode 100644
index 000000000..987e8669a
--- /dev/null
+++ b/src/manage_permissions.c
@@ -0,0 +1,29 @@
+/* Copyright (C) 2026 Greenbone AG
+ *
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+#include "manage_sql_permissions.h"
+
+#include <string.h>
+
+#undef G_LOG_DOMAIN
+/**
+ * @brief GLib log domain.
+ */
+#define G_LOG_DOMAIN "md manage"
+
+/**
+ * @brief Test whether a permission is the special Admin permission.
+ *
+ * @param[in]  permission_id  UUID of permission.
+ *
+ * @return 1 permission is Admin, else 0.
+ */
+int
+permission_is_admin (const char *permission_id)
+{
+  if (permission_id)
+    return strcmp (permission_id, PERMISSION_UUID_ADMIN_EVERYTHING);
+  return 0;
+}
diff --git a/src/manage_permissions.h b/src/manage_permissions.h
new file mode 100644
index 000000000..62db451ad
--- /dev/null
+++ b/src/manage_permissions.h
@@ -0,0 +1,12 @@
+/* Copyright (C) 2026 Greenbone AG
+ *
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+#ifndef _GVMD_MANAGE_PERMISSIONS_H
+#define _GVMD_MANAGE_PERMISSIONS_H
+
+int
+permission_is_admin (const char *);
+
+#endif /* not _GVMD_MANAGE_PERMISSIONS_H */
diff --git a/src/manage_sql.c b/src/manage_sql.c
index 87e488194..24cae8abc 100644
--- a/src/manage_sql.c
+++ b/src/manage_sql.c
@@ -46,6 +46,7 @@
 #include "manage_sql_filters.h"
 #include "manage_sql_groups.h"
 #include "manage_sql_oci_image_targets.h"
+#include "manage_sql_permissions.h"
 #include "manage_sql_port_lists.h"
 #include "manage_sql_report_configs.h"
 #include "manage_sql_report_formats.h"
@@ -33091,36 +33092,6 @@ modify_schedule (const char *schedule_id, const char *name, const char *comment,
 
 /* Permissions. */
 
-/**
- * @brief Adjust location of resource in permissions.
- *
- * @param[in]   type  Type.
- * @param[in]   old   Resource ID in old table.
- * @param[in]   new   Resource ID in new table.
- * @param[in]   to    Destination, trash or table.
- */
-void
-permissions_set_locations (const char *type, resource_t old, resource_t new,
-                           int to)
-{
-  sql ("UPDATE permissions SET resource_location = %i, resource = %llu"
-       " WHERE resource_type = '%s' AND resource = %llu"
-       " AND resource_location = %i;",
-       to,
-       new,
-       type,
-       old,
-       to == LOCATION_TABLE ? LOCATION_TRASH : LOCATION_TABLE);
-  sql ("UPDATE permissions_trash SET resource_location = %i, resource = %llu"
-       " WHERE resource_type = '%s' AND resource = %llu"
-       " AND resource_location = %i;",
-       to,
-       new,
-       type,
-       old,
-       to == LOCATION_TABLE ? LOCATION_TRASH : LOCATION_TABLE);
-}
-
 /**
  * @brief Set permissions to orphan.
  *
@@ -33936,21 +33907,6 @@ permission_is_predefined (permission_t permission)
                     permission);
 }
 
-/**
- * @brief Test whether a permission is the special Admin permission.
- *
- * @param[in]  permission_id  UUID of permission.
- *
- * @return 1 permission is Admin, else 0.
- */
-int
-permission_is_admin (const char *permission_id)
-{
-  if (permission_id)
-    return strcmp (permission_id, PERMISSION_UUID_ADMIN_EVERYTHING);
-  return 0;
-}
-
 /**
  * @brief Return whether a permission is in use.
  *
diff --git a/src/manage_sql.h b/src/manage_sql.h
index d9579c774..666e096c7 100644
--- a/src/manage_sql.h
+++ b/src/manage_sql.h
@@ -35,16 +35,6 @@
  */
 #define MANAGE_NVT_SELECTOR_UUID_ALL "54b45713-d4f4-4435-b20d-304c175ed8c5"
 
-/**
- * @brief Predefined role UUID.
- */
-#define PERMISSION_UUID_ADMIN_EVERYTHING "b3b56a8c-c2fd-11e2-a135-406186ea4fc5"
-
-/**
- * @brief Predefined role UUID.
- */
-#define PERMISSION_UUID_SUPER_ADMIN_EVERYTHING "a9801074-6fe2-11e4-9d81-406186ea4fc5"
-
 /**
  * @brief Predefined role UUID.
  */
@@ -472,9 +462,6 @@ tags_remove_resource (const char *, resource_t, int);
 void
 tags_set_locations (const char *, resource_t, resource_t, int);
 
-void
-permissions_set_locations (const char *, resource_t, resource_t, int);
-
 void
 permissions_set_orphans (const char *, resource_t, int);
 
diff --git a/src/manage_sql_agent_groups.c b/src/manage_sql_agent_groups.c
index aaca8bafa..34476b148 100644
--- a/src/manage_sql_agent_groups.c
+++ b/src/manage_sql_agent_groups.c
@@ -18,6 +18,7 @@
 #include "manage_sql_agent_groups.h"
 #include "manage_sql_agents.h"
 #include "manage_sql_copy.h"
+#include "manage_sql_permissions.h"
 
 #include <util/uuidutils.h>
 
diff --git a/src/manage_sql_alerts.c b/src/manage_sql_alerts.c
index 986d47e8d..16fd30852 100644
--- a/src/manage_sql_alerts.c
+++ b/src/manage_sql_alerts.c
@@ -7,6 +7,7 @@
 #include "manage_acl.h"
 #include "manage_sql.h"
 #include "manage_sql_filters.h"
+#include "manage_sql_permissions.h"
 #include "manage_sql_report_formats.h"
 
 #include <ctype.h>
diff --git a/src/manage_sql_configs.c b/src/manage_sql_configs.c
index f2c567208..69d11dccf 100644
--- a/src/manage_sql_configs.c
+++ b/src/manage_sql_configs.c
@@ -14,6 +14,7 @@
 #include "manage_acl.h"
 #include "manage_sql.h"
 #include "manage_sql_nvts.h"
+#include "manage_sql_permissions.h"
 #include "sql.h"
 
 #include <assert.h>
diff --git a/src/manage_sql_filters.c b/src/manage_sql_filters.c
index 4a42288d2..23b7579f1 100644
--- a/src/manage_sql_filters.c
+++ b/src/manage_sql_filters.c
@@ -8,6 +8,7 @@
 #include "manage_filter_utils.h"
 #include "manage_settings.h"
 #include "manage_sql.h"
+#include "manage_sql_permissions.h"
 
 #include <ctype.h>
 
diff --git a/src/manage_sql_groups.c b/src/manage_sql_groups.c
index 438699111..ca4915268 100644
--- a/src/manage_sql_groups.c
+++ b/src/manage_sql_groups.c
@@ -6,6 +6,7 @@
 #include "manage_sql_groups.h"
 #include "manage_acl.h"
 #include "manage_sql.h"
+#include "manage_sql_permissions.h"
 #include "manage_sql_users.h"
 #include "sql.h"
 
diff --git a/src/manage_sql_oci_image_targets.c b/src/manage_sql_oci_image_targets.c
index 0c7d26e0c..e3689e24e 100644
--- a/src/manage_sql_oci_image_targets.c
+++ b/src/manage_sql_oci_image_targets.c
@@ -8,6 +8,7 @@
 #include "debug_utils.h"
 #include "manage_sql_oci_image_targets.h"
 #include "manage_acl.h"
+#include "manage_sql_permissions.h"
 #include "sql.h"
 #include "utils.h"
 
diff --git a/src/manage_sql_permissions.c b/src/manage_sql_permissions.c
new file mode 100644
index 000000000..b5c7783b6
--- /dev/null
+++ b/src/manage_sql_permissions.c
@@ -0,0 +1,45 @@
+/* Copyright (C) 2026 Greenbone AG
+ *
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+#include "manage_sql_permissions.h"
+#include "manage_acl.h"
+#include "sql.h"
+
+/**
+ * @file
+ * @brief GVM management layer: Permissions SQL
+ *
+ * The Permissions SQL for the GVM management layer.
+ */
+
+/**
+ * @brief Adjust location of resource in permissions.
+ *
+ * @param[in]   type  Type.
+ * @param[in]   old   Resource ID in old table.
+ * @param[in]   new   Resource ID in new table.
+ * @param[in]   to    Destination, trash or table.
+ */
+void
+permissions_set_locations (const char *type, resource_t old, resource_t new,
+                           int to)
+{
+  sql ("UPDATE permissions SET resource_location = %i, resource = %llu"
+       " WHERE resource_type = '%s' AND resource = %llu"
+       " AND resource_location = %i;",
+       to,
+       new,
+       type,
+       old,
+       to == LOCATION_TABLE ? LOCATION_TRASH : LOCATION_TABLE);
+  sql ("UPDATE permissions_trash SET resource_location = %i, resource = %llu"
+       " WHERE resource_type = '%s' AND resource = %llu"
+       " AND resource_location = %i;",
+       to,
+       new,
+       type,
+       old,
+       to == LOCATION_TABLE ? LOCATION_TRASH : LOCATION_TABLE);
+}
diff --git a/src/manage_sql_permissions.h b/src/manage_sql_permissions.h
new file mode 100644
index 000000000..8186b1b77
--- /dev/null
+++ b/src/manage_sql_permissions.h
@@ -0,0 +1,25 @@
+/* Copyright (C) 2026 Greenbone AG
+ *
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+#ifndef _GVMD_MANAGE_SQL_PERMISSIONS_H
+#define _GVMD_MANAGE_SQL_PERMISSIONS_H
+
+#include "manage_permissions.h"
+#include "manage_resources.h"
+
+/**
+ * @brief Predefined role UUID.
+ */
+#define PERMISSION_UUID_ADMIN_EVERYTHING "b3b56a8c-c2fd-11e2-a135-406186ea4fc5"
+
+/**
+ * @brief Predefined role UUID.
+ */
+#define PERMISSION_UUID_SUPER_ADMIN_EVERYTHING "a9801074-6fe2-11e4-9d81-406186ea4fc5"
+
+void
+permissions_set_locations (const char *, resource_t, resource_t, int);
+
+#endif //_GVMD_MANAGE_SQL_PERMISSIONS_H
diff --git a/src/manage_sql_port_lists.c b/src/manage_sql_port_lists.c
index 4f1fbfbe8..fddf47c62 100644
--- a/src/manage_sql_port_lists.c
+++ b/src/manage_sql_port_lists.c
@@ -12,6 +12,7 @@
 
 #include "manage_sql_port_lists.h"
 #include "manage_acl.h"
+#include "manage_sql_permissions.h"
 #include "sql.h"
 
 #include <errno.h>
diff --git a/src/manage_sql_report_configs.c b/src/manage_sql_report_configs.c
index 9eae4262e..d043d3ca3 100644
--- a/src/manage_sql_report_configs.c
+++ b/src/manage_sql_report_configs.c
@@ -13,6 +13,7 @@
 #include "debug_utils.h"
 #include "manage_sql_report_configs.h"
 #include "manage_acl.h"
+#include "manage_sql_permissions.h"
 #include "manage_sql_report_formats.h"
 #include "sql.h"
 #include "utils.h"
diff --git a/src/manage_sql_report_formats.c b/src/manage_sql_report_formats.c
index ba1072ec8..ee73ea057 100644
--- a/src/manage_sql_report_formats.c
+++ b/src/manage_sql_report_formats.c
@@ -13,6 +13,7 @@
 #include "debug_utils.h"
 #include "manage_sql_report_formats.h"
 #include "manage_acl.h"
+#include "manage_sql_permissions.h"
 #include "manage_sql_report_configs.h"
 #include "manage_sql_users.h"
 #include "sql.h"
diff --git a/src/manage_sql_roles.c b/src/manage_sql_roles.c
index 6c9597924..c2b8b9e67 100644
--- a/src/manage_sql_roles.c
+++ b/src/manage_sql_roles.c
@@ -6,6 +6,7 @@
 #include "manage_sql_roles.h"
 #include "manage_acl.h"
 #include "manage_sql.h"
+#include "manage_sql_permissions.h"
 #include "manage_sql_users.h"
 #include "sql.h"
 
diff --git a/src/manage_sql_tickets.c b/src/manage_sql_tickets.c
index 46a1dead6..93df2020c 100644
--- a/src/manage_sql_tickets.c
+++ b/src/manage_sql_tickets.c
@@ -13,6 +13,7 @@
 #include "manage_sql_tickets.h"
 #include "manage_acl.h"
 #include "manage_sql.h"
+#include "manage_sql_permissions.h"
 #include "sql.h"
 
 #include <stdlib.h>