added permissions for enrolling