setup permissions and authorizations