Policy with a set of permissions on extension operations
Optional
Permissions on 'Install' operation
Permission on 'Request' operation
Policy with a set of permissions on extension operations