add extra grant for tungsten user