Task ocean:update_roles now installs rights.