Security API -> Permissions -> createorreplacepermissiontarget
external_document