App config permissions