What do the various realm permissions do?