$ 0 0 I ended up doing a custom action to programmatically change the permissions. I read somewhere that PermissionEx is running under the local system account...