configure plugin permissions