customize op permission levels