template management permission