Configure permissions for User controller