virtuoso permissions