update perms to grant