Associate protected service instance with permit