load actual permissions from rsServiceControl