add permission to Entitlment service identity for exchange action