principal permissions