add additional entity permissions