updating docs with more info on adding/useing permissions