[OE-4724] rbac migration helpers