[roles] Simplify permissions strings for now.