add necessary permissions