explorer granular permission