Add rules config permission