is there a specific permission to allow a role the ability to install bundles?