additional automated permission management