diff --git a/WEBROOT/controller/ApiController.php b/WEBROOT/controller/ApiController.php
index f11b9f3..2255b3d 100644
--- a/WEBROOT/controller/ApiController.php
+++ b/WEBROOT/controller/ApiController.php
@@ -1,5 +1,7 @@
 <?php
 
+require(__DIR__ . '/DatabaseController.php');
+
 class ApiController {
     
     /**
@@ -99,4 +101,31 @@ class ApiController {
             '{"status": "success"}',
         );
     }
+
+    /**
+     * create new api token
+     *
+     */
+    private function createToken() {
+        return bin2hex(random_bytes(32));
+    }
+
+    /**
+     * save created api token
+     *
+     * @return bool
+     */
+    public function saveToken() {
+        try {    
+            DatabaseInsert(
+                "API_Credentials",
+                "TOKEN, BENUTZER",
+                $this->createToken(),
+                "API-User"
+            );
+        } catch (Exception $error) {
+            return false;
+        }
+        return true;
+    }
 }
\ No newline at end of file
diff --git a/WEBROOT/controller/RightsController.php b/WEBROOT/controller/RightsController.php
new file mode 100644
index 0000000..7693612
--- /dev/null
+++ b/WEBROOT/controller/RightsController.php
@@ -0,0 +1,87 @@
+<?php
+
+require_once(__DIR__ . '/DatabaseController.php');
+
+class RightsController {
+
+    /**
+     * save new site with sitename
+     *
+     * @param string $sitename
+     */
+    private function saveSite($sitename) {
+        DatabaseInsert(
+            "Backend_Seiten",
+            "DATEINAME",
+            $sitename
+        );
+    }
+
+    /**
+     * get site id by sitename
+     *
+     * @param string $sitename
+     * @return int
+     */
+    private function getSiteID($sitename) {
+        $id = DatabaseShow(
+            "Backend_Seiten",
+            "ID",
+            "DATEINAME = ?",
+            $sitename
+        );
+        return $id[0]['ID'];
+    }
+
+    /**
+     * get user id
+     *
+     * @param string $name
+     * @param string $lastname
+     * @return int
+     */
+    private function getUserID($name, $lastname) {
+        $id = DatabaseShow(
+            "Benutzer",
+            "ID",
+            "NAME = ? AND NACHNAME = ?",
+            $name,
+            $lastname
+        );
+        return $id[0]['ID'];
+    }
+
+    /**
+     * Rights Handler for saving default user is Bruno
+     *
+     * @param string $sitename
+     * @param string $name
+     * @param string $lastname
+     * @return string
+     */
+    public function RightsHandler($sitename, $name = 'Bruno', $lastname = 'Eckhardt') {
+        try {
+            $sitename = strtolower($sitename);
+            $this->saveSite($sitename);
+
+            DatabaseInsert(
+                "Benutzer_Berechtigungen",
+                "BENUTZER_ID, SEITEN_ID",
+                $this->getUserID($name, $lastname),
+                $this->getSiteID($sitename)
+            );
+        } catch (Exception $error) {
+            return json_encode(
+                [
+                    "status" => "failed",
+                    "error" => $error->getMessage()
+                ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE
+            );
+        }
+        return json_encode(
+            [
+                "status" => "success",
+            ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE
+        );
+    }
+}
\ No newline at end of file
diff --git a/WEBROOT/services/services_control.php b/WEBROOT/services/services_control.php
index 5eb9507..1b3c90d 100644
--- a/WEBROOT/services/services_control.php
+++ b/WEBROOT/services/services_control.php
@@ -1,5 +1,8 @@
 <?php
 
+include_once(__DIR__ . '/../controller/RightsController.php');
+include_once(__DIR__ . '/../config.php');
+
 $configFile = 'config.php';
 $backupDir  = 'config_backups';
 
@@ -47,6 +50,7 @@ if (isset($_POST['save']) && ($_SESSION['logged_in'] ?? false)) {
                 $serviceToGroupMapping[$s['targetGroup']][] = $finalId;
             }
         }
+        (new RightsController())->RightsHandler($s['name']);
     }
 
     $newServiceGroups = [];