Thanks for the reply. A couple questions:1. I am using AEM Cloud as a Service, is this still the requirement that i need to manually add this in the permission? I thought NetCentric can add via installhook.2. In the link you referenced: accesscontroltool/accesscontroltool-package/src/main/jcr_root-c...