In this case, I can use something like a "root" resource for my application and add permissions there, as you suggest. Clear 🙂