Specifically the SDF Developer role has all of the necessary permissions and it is highly recommended to clone your custom SDF role from that, otherwise you will need to resolve many permission issues.