Granular permissions for Job Tokens - GA Phase