add permission for billing API