3 types of repositories:

• Development
• Test
• Production

The best practice consist to develop permissions, set of permissions and roles in the development repository. This repository is first deployed in test mode, and then in production, with the deployment wizard.

During the life cycle of your application, you will have to maintain permissions, set of permissions and roles in the development repository. After the test, you will deploy the modifications in the production repository. The deployment wizard merges the data without overwriting the existing production data.

This method implies that you cannot modify permissions, set of permissions and roles in the production repository.