ensure deployment uses the right permissions backend