add permissions to roles when installed

Signed-off-by: songyang <waoywssy@gmail.com>