allowing specification of username explicitly for special permissions