add permission for member operation