Merge "Add auto-grant permission slice API" into pi-dev