use GET_ACCOUNTS permission