adding PACL permissions for VM