CE-86 add permission welcomeexempt to STAFF group