updating root grants to run once