associate permission after user sign in