Please also add these 2 permissions in runtimeshell, runtimeclientshell, and app template.