Factoring out common permissions into a _common role