UKSM: set user permissions