The default roles say "The XYZ role must always exist with this set of permissions. Rather than edit it, you can create a copy of the role to make changes", but there doesn't appear to be a way to clone the role, meaning we have to create a new role and then set the permissions from scratch. Am I missing something, or is this a missing feature?