New annotation permissions now include roles.