Permissions are defined on a per-module basis using the module's permissions.xml XML file. This is a file stored in ./lib/modules/modulename/settings/permissions.xml.

You can find more information on creating this file in the Recite CMS Module Development Guide.