diff --git a/app/models.py b/app/models.py
index 8cc6cc19d..614d3b5c6 100644
--- a/app/models.py
+++ b/app/models.py
@@ -168,9 +168,17 @@ class DVLAOrganisation(db.Model):
 INTERNATIONAL_SMS_TYPE = 'international_sms'
 INBOUND_SMS_TYPE = 'inbound_sms'
 SCHEDULE_NOTIFICATIONS = 'schedule_notifications'
+EMAIL_AUTH = 'email_auth'
 
-SERVICE_PERMISSION_TYPES = [EMAIL_TYPE, SMS_TYPE, LETTER_TYPE, INTERNATIONAL_SMS_TYPE, INBOUND_SMS_TYPE,
-                            SCHEDULE_NOTIFICATIONS]
+SERVICE_PERMISSION_TYPES = [
+    EMAIL_TYPE,
+    SMS_TYPE,
+    LETTER_TYPE,
+    INTERNATIONAL_SMS_TYPE,
+    INBOUND_SMS_TYPE,
+    SCHEDULE_NOTIFICATIONS,
+    EMAIL_AUTH,
+]
 
 
 class ServicePermissionTypes(db.Model):
diff --git a/migrations/versions/0129_add_email_auth_permission_.py b/migrations/versions/0129_add_email_auth_permission_.py
new file mode 100644
index 000000000..94b135f9c
--- /dev/null
+++ b/migrations/versions/0129_add_email_auth_permission_.py
@@ -0,0 +1,21 @@
+"""
+
+Revision ID: 0129_add_email_auth_permission
+Revises: 0128_noti_to_sms_sender
+Create Date: 2017-10-26 14:33:41.336861
+
+"""
+from alembic import op
+
+
+revision = '0129_add_email_auth_permission'
+down_revision = '0128_noti_to_sms_sender'
+
+
+def upgrade():
+    op.execute("INSERT INTO service_permission_types VALUES ('email_auth')")
+
+
+def downgrade():
+    op.execute("DELETE FROM service_permissions WHERE permission = 'email_auth'")
+    op.execute("DELETE FROM service_permission_types WHERE name = 'email_auth'")