Add GrantPermission to operator API