I'm not sure how to lookup for the read permission? Do I just omit the resourceObjectType? 🤔