Hsa permissions