Plan and implement functional access permissions