Migrate from capabilities to roles.