Add permissions from site-wide into OS

#4917 
WIP