We probably don't want to add them manually from console since if you terrafom update the cluster, manual permissions could get wiped