diff --git a/src/views/device-manage/device/components/CloudCommand.vue b/src/views/device-manage/device/components/CloudCommand.vue
index c2d6f3ea..f901c310 100644
--- a/src/views/device-manage/device/components/CloudCommand.vue
+++ b/src/views/device-manage/device/components/CloudCommand.vue
@@ -9,6 +9,7 @@ import { useModal } from '@/components/Modal'
 import { getCloudCommandLogs, getMessageContent } from '@/api/device-manage/device/cloud-command'
 import type { Device } from '@/api/device-manage/device/types'
 import { CloudCommandType } from '@/api/device-manage/device/types'
+import { usePermission } from '@/hooks/web/usePermission'
 
 defineProps<{ device?: Device }>()
 
@@ -65,6 +66,8 @@ const [register, { reload }] = useTable({
   inset: true,
   canResize: false,
 })
+
+const { hasPermission } = usePermission()
 </script>
 
 <template>
@@ -72,6 +75,7 @@ const [register, { reload }] = useTable({
     <div flex="~ items-center gap-12px" mb="12px">
       <Segmented v-model:value="selectedCommonType" :options="commandTypes" @change="() => reload()" />
       <a-button
+        v-if="hasPermission('device_cloud_command_action')"
         type="primary"
         @click="openModal(true, {
           deviceId: device!.id,
diff --git a/src/views/device-manage/device/index.vue b/src/views/device-manage/device/index.vue
index 6202a8e2..9da1c6c3 100644
--- a/src/views/device-manage/device/index.vue
+++ b/src/views/device-manage/device/index.vue
@@ -36,7 +36,7 @@ const [register, { reload }] = useTable({
     title: '操作',
     dataIndex: 'action',
     fixed: 'right',
-    auth: ['view', 'edit', 'delete'].map(code => `device_${code}`),
+    auth: ['view', 'edit', 'delete', 'cmd_send'].map(code => `device_${code}`),
   },
 })
 
@@ -79,6 +79,7 @@ async function handleDelete(id: string) {
               {
                 icon: 'i-ant-design:cloud-sync-outlined',
                 label: '指令下发',
+                auth: 'device_cmd_send',
                 onClick: () => openSendCommandModal(true, {
                   deviceId: record.id,
                   productId: record.productId,