get Permission & Token