PLINK-268 permission entity configuration and resource to entity matching