WIP grant tool facility to do the permission grant on behalf of the user