When there is update to the permission, i.e., add/remove permission.
Update the schema for roles in first before any changes can go to RBAC to do seeding
https://github.com/RedHatInsights/kessel-config/blob/master/schema.zed

adding/deleting system role or adding/deleting permission from a system role should be fine, no schema change required, but RBAC have to handle tuple change.