marked which Permissions are necessary for API