The site connecting to the wallet should be adding those permissions to a manifest and it should ask the all together, like a phone app. People are just figuring out how to wire it in