Access user permissions array in user token