specify required permissions

[ci skip]