permissions improvment for pre-prod env