the permission identifier (e.g. project-read)
project-read
optional human-readable description of why the permission is needed