yeah you can set the permissions on the role too there's several ways to do it