add required user permissions