This is something you only do once anyway: set up the roles permissions. So it's not a big issue after you have the first time it done.