Currently you need to specify the user query and one permission to get results. Change it the way that for each user the full list of permissions is returned. For example:
That means removal of selected parameter.
If permission parameter present, return only users that have that permission.