add external cache permission