add enable Admin SDK permission in docs