completes: U4-3282 Expose permission assignment methods at the service layer