Triage API permissions