Updated permissions to match DDB roles