#488 Improving api permissions management for end users