setting the canned user with exempt permissions