snapshot of user permissions tree