Had 'role' and 'type' reversed. Permissions change should work now.