activate provision and set permissions