change permissions for admin resources