Add a permission for manage_container_profile_record.