snapshot-permissions