new permissions scope