PUT requests to /permissions/ with non-existing user names in"exceptions" field result in ISE, which probably should not be the case.
-- Best regards,Rooslan