Add CPPI permission provider