Update permission instructions in docs