You can include one or more API operations as permissions.
You can specify any amount of prefixes, but the total length of characters of all prefixes must be less than 256 bytes in size.