Many roles to permission criteria.