Investigate creating a method which takes all resources used by a service and returns a list of permissions the Service user would need. This is needed as it can start getting unwieldy to figure all the permissions by trial and error after a big updated.