master add scope permissions