Well the endpoint is not just used for activation of a permission.  An admin level user could alter an existing permission by either revoking or granting a higher level of access.