Custom roles can be created to add to a group of managers or extensions instead of editing permissions one by one.