billing API - add update permissions for user