add permissions for admin