- assign permission role - assign permission menu - init basic permission in lifecycle (Admin) - adding some permission to some APIs