permission to update customer locations: all staff who have permission can update all customer location