learning how org permissions work