team managment: add, revoke, list; permission managment