permissions: instead of granting access to vps instances, grant access to service ids
permissions: add link to permission page, allow recipients to see their permissions and remove them