add grant option for user