-- Apply after migration 003. Adds roles without changing existing assignments.
INSERT INTO tenant_roles(role_key,display_name,built_in,active) VALUES
 ('document_viewer','Document Viewer',1,1),
 ('checkin_operator','Check-in Operator',1,1)
ON DUPLICATE KEY UPDATE display_name=VALUES(display_name),active=1;
INSERT IGNORE INTO tenant_role_scopes(role_key,scope_type) VALUES
 ('document_viewer','unit'),('checkin_operator','unit');