Use rbac :add_management_permissions