Add admin to basic ACL

+ Add “admin” to “permissions” property
+ Allow change to “admin” permission