This is a great approach to determine permission especially for service accounts - thanks for giving me another tool for my toolchain.