TL;DR: Use the API to set the required permission on the role.
In the end I ended up following the solution suggested in this post. The UX is currently broken and doesn’t allow adding this permission. It works through the API though.
1 Like