setup more permissions to workspacemanager