Consider what permissions apply to a root-level collection vs type. Root level collection: - Read - ReadMany - ReadOne - Create - Update - Delete - Query - Order - Page