Can you please explain the exact permissions and or how we revoke these?