Permissions should be specified as an array.