How to setup permissions for invoices