diff --git a/apps/api/src/app/activities/activities.controller.ts b/apps/api/src/app/activities/activities.controller.ts
index da7aed21d..49c8885a1 100644
--- a/apps/api/src/app/activities/activities.controller.ts
+++ b/apps/api/src/app/activities/activities.controller.ts
@@ -59,7 +59,7 @@ export class ActivitiesController {
   ) {}
 
   @Delete()
-  @HasPermission(permissions.deleteOrder)
+  @HasPermission(permissions.deleteActivity)
   @UseGuards(AuthGuard('jwt'), HasPermissionGuard)
   @UseInterceptors(TransformDataSourceInRequestInterceptor)
   public async deleteActivities(
@@ -84,7 +84,7 @@ export class ActivitiesController {
   }
 
   @Delete(':id')
-  @HasPermission(permissions.deleteOrder)
+  @HasPermission(permissions.deleteActivity)
   @UseGuards(AuthGuard('jwt'), HasPermissionGuard)
   public async deleteActivity(@Param('id') id: string): Promise<Order> {
     const activity = await this.activitiesService.order({
@@ -191,7 +191,7 @@ export class ActivitiesController {
     return activity;
   }
 
-  @HasPermission(permissions.createOrder)
+  @HasPermission(permissions.createActivity)
   @Post()
   @UseGuards(AuthGuard('jwt'), HasPermissionGuard)
   @UseInterceptors(TransformDataSourceInRequestInterceptor)
@@ -274,7 +274,7 @@ export class ActivitiesController {
     return activity;
   }
 
-  @HasPermission(permissions.updateOrder)
+  @HasPermission(permissions.updateActivity)
   @Put(':id')
   @UseGuards(AuthGuard('jwt'), HasPermissionGuard)
   @UseInterceptors(TransformDataSourceInRequestInterceptor)
diff --git a/apps/api/src/app/import/import.controller.ts b/apps/api/src/app/import/import.controller.ts
index 81481fd65..d5724bef2 100644
--- a/apps/api/src/app/import/import.controller.ts
+++ b/apps/api/src/app/import/import.controller.ts
@@ -38,7 +38,7 @@ export class ImportController {
 
   @Post()
   @UseGuards(AuthGuard('jwt'), HasPermissionGuard)
-  @HasPermission(permissions.createOrder)
+  @HasPermission(permissions.createActivity)
   @UseInterceptors(TransformDataSourceInRequestInterceptor)
   @UseInterceptors(TransformDataSourceInResponseInterceptor)
   public async import(
diff --git a/apps/api/src/app/portfolio/portfolio.controller.ts b/apps/api/src/app/portfolio/portfolio.controller.ts
index 80d7f9acc..73d4320d6 100644
--- a/apps/api/src/app/portfolio/portfolio.controller.ts
+++ b/apps/api/src/app/portfolio/portfolio.controller.ts
@@ -639,7 +639,7 @@ export class PortfolioController {
     return report;
   }
 
-  @HasPermission(permissions.updateOrder)
+  @HasPermission(permissions.updateActivity)
   @Put('holding/:dataSource/:symbol/tags')
   @UseInterceptors(TransformDataSourceInRequestInterceptor)
   @UseGuards(AuthGuard('jwt'), HasPermissionGuard)
diff --git a/libs/common/src/lib/permissions.ts b/libs/common/src/lib/permissions.ts
index cb4eb175b..62ae59fbe 100644
--- a/libs/common/src/lib/permissions.ts
+++ b/libs/common/src/lib/permissions.ts
@@ -9,10 +9,10 @@ export const permissions = {
   createAccess: 'createAccess',
   createAccount: 'createAccount',
   createAccountBalance: 'createAccountBalance',
+  createActivity: 'createActivity',
   createApiKey: 'createApiKey',
   createMarketData: 'createMarketData',
   createMarketDataOfOwnAssetProfile: 'createMarketDataOfOwnAssetProfile',
-  createOrder: 'createOrder',
   createOwnTag: 'createOwnTag',
   createPlatform: 'createPlatform',
   createTag: 'createTag',
@@ -21,8 +21,8 @@ export const permissions = {
   deleteAccess: 'deleteAccess',
   deleteAccount: 'deleteAccount',
   deleteAccountBalance: 'deleteAccountBalance',
+  deleteActivity: 'deleteActivity',
   deleteAuthDevice: 'deleteAuthDevice',
-  deleteOrder: 'deleteOrder',
   deleteOwnUser: 'deleteOwnUser',
   deletePlatform: 'deletePlatform',
   deleteTag: 'deleteTag',
@@ -53,10 +53,10 @@ export const permissions = {
   toggleReadOnlyMode: 'toggleReadOnlyMode',
   updateAccount: 'updateAccount',
   updateAccess: 'updateAccess',
+  updateActivity: 'updateActivity',
   updateAuthDevice: 'updateAuthDevice',
   updateMarketData: 'updateMarketData',
   updateMarketDataOfOwnAssetProfile: 'updateMarketDataOfOwnAssetProfile',
-  updateOrder: 'updateOrder',
   updateOwnAccessToken: 'updateOwnAccessToken',
   updatePlatform: 'updatePlatform',
   updateTag: 'updateTag',
@@ -74,19 +74,19 @@ export function getPermissions(aRole: Role): string[] {
         permissions.createAccess,
         permissions.createAccount,
         permissions.createAccountBalance,
+        permissions.createActivity,
         permissions.createWatchlistItem,
         permissions.deleteAccountBalance,
         permissions.deleteWatchlistItem,
         permissions.createMarketData,
         permissions.createMarketDataOfOwnAssetProfile,
-        permissions.createOrder,
         permissions.createOwnTag,
         permissions.createPlatform,
         permissions.createTag,
         permissions.deleteAccess,
         permissions.deleteAccount,
+        permissions.deleteActivity,
         permissions.deleteAuthDevice,
-        permissions.deleteOrder,
         permissions.deletePlatform,
         permissions.deleteTag,
         permissions.deleteUser,
@@ -99,10 +99,10 @@ export function getPermissions(aRole: Role): string[] {
         permissions.readWatchlist,
         permissions.updateAccount,
         permissions.updateAccess,
+        permissions.updateActivity,
         permissions.updateAuthDevice,
         permissions.updateMarketData,
         permissions.updateMarketDataOfOwnAssetProfile,
-        permissions.updateOrder,
         permissions.updatePlatform,
         permissions.updateTag,
         permissions.updateUserSettings,
@@ -125,15 +125,15 @@ export function getPermissions(aRole: Role): string[] {
         permissions.createAccess,
         permissions.createAccount,
         permissions.createAccountBalance,
+        permissions.createActivity,
         permissions.createMarketDataOfOwnAssetProfile,
-        permissions.createOrder,
         permissions.createOwnTag,
         permissions.createWatchlistItem,
         permissions.deleteAccess,
         permissions.deleteAccount,
         permissions.deleteAccountBalance,
+        permissions.deleteActivity,
         permissions.deleteAuthDevice,
-        permissions.deleteOrder,
         permissions.deleteWatchlistItem,
         permissions.readAiPrompt,
         permissions.readMarketDataOfOwnAssetProfile,
@@ -141,9 +141,9 @@ export function getPermissions(aRole: Role): string[] {
         permissions.readWatchlist,
         permissions.updateAccount,
         permissions.updateAccess,
+        permissions.updateActivity,
         permissions.updateAuthDevice,
         permissions.updateMarketDataOfOwnAssetProfile,
-        permissions.updateOrder,
         permissions.updateUserSettings,
         permissions.updateViewMode
       ];