Added permission policy for iam user