fix: add rolemap for new permissions