add additional permissions