added more explanation about the required permissions (and authorization)