Looks like we could reduce this and the above to either a single method or break up the above method into something like `format_permissions` and `setup_user_with_permissions` so as not to confuse developers as to which one they should use.