associate permissions with existed users