updating users docs with info about adding permissions