set permissions for KSM