define permission levels on permission object