-- Business team admins can manage non-admin staff (invite / update / remove).
-- Owners keep full team.* ; editors/viewers stay without team management.

INSERT INTO role_permissions (role_id, permission_id)
SELECT r.id, p.id
FROM roles r
JOIN permissions p ON p.slug IN (
  'business.team.invite',
  'business.team.update',
  'business.team.remove'
)
WHERE r.slug = 'admin'
ON CONFLICT DO NOTHING;