grant all, not just usage