How to manage multi-team permissions