add app assignment and permission functionality