If the token has no additional permissions associated with it means it has whatever permissions the parent user has at that time