api perimissions