The new granular tokens get pretty specific on permissions now adays