give permissions to an unprivileged user to act as the frontend