domain operator; grant assigned "Settings" oneshot { permission assigned.permission.invalid.settings; }