Enforce active flag.
Added permissions with the exception of SEARCH, which I'm not sure makes sense. Still need to update the client to work with them.