Appearently 'default role' isn't enough - added permissions to feature (via defaultconfig).