Implement a Role with disallowed permissions