permissions in heartbeat feature