diff --git a/config/install/user.role.agency.yml b/config/install/user.role.agency.yml
index bd4b049..ec3072b 100644
--- a/config/install/user.role.agency.yml
+++ b/config/install/user.role.agency.yml
@@ -13,8 +13,6 @@ permissions:
   - 'add media collection (shared) entities'
   - 'add media collection entities'
   - 'add media collection item entities'
-  - 'add terms in category'
-  - 'add terms in keyword'
   - 'create guideline media'
   - 'create icon media'
   - 'create image media'
@@ -46,13 +44,11 @@ permissions:
   - 'edit own video_file media'
   - 'edit terms in category'
   - 'edit terms in keyword'
-  - 'unpublish own media'
   - 'update media'
   - 'upload media'
   - 'view media'
   - 'view own media collection entities'
   - 'view own media collection item entities'
-  - 'view own published media'
   - 'view own unpublished media'
   - 'view shared media collection entities'
   - 'view shared media collection item entities'
diff --git a/config/install/user.role.authenticated.yml b/config/install/user.role.authenticated.yml
index 6b284da..e44abb1 100644
--- a/config/install/user.role.authenticated.yml
+++ b/config/install/user.role.authenticated.yml
@@ -7,29 +7,21 @@ weight: 1
 is_admin: false
 permissions:
   - 'access content'
-  - 'access gallery_media_library entity browser pages'
   - 'access media asset library'
   - 'access media asset navigation block'
-  - 'access site-wide contact form'
-  - 'add marketing activity entities'
   - 'add media collection (shared) entities'
   - 'add media collection entities'
   - 'add media collection item entities'
-  - 'add upload entities'
-  - 'create gdpr tasks'
   - 'delete media collection (shared) entities'
   - 'delete own media collection entities'
   - 'delete own media collection item entities'
   - 'edit media collection (shared) entities'
   - 'edit own media collection entities'
   - 'edit own media collection item entities'
-  - 'restful get entity:marketing_activity'
   - 'use text format restricted_html'
   - userprotect.account.edit
   - userprotect.mail.edit
   - userprotect.pass.edit
-  - 'view gdpr data summary'
-  - 'view gdpr tasks'
   - 'view media'
   - 'view own media collection entities'
   - 'view own media collection item entities'
diff --git a/config/install/user.role.dam.yml b/config/install/user.role.dam.yml
index cd7d675..a23e618 100644
--- a/config/install/user.role.dam.yml
+++ b/config/install/user.role.dam.yml
@@ -6,7 +6,6 @@ label: DAM
 weight: 2
 is_admin: null
 permissions:
-  - 'view any published media'
   - 'view media'
   - 'view shared media collection entities'
   - 'view shared media collection item entities'
diff --git a/config/install/user.role.keyword_contributor.yml b/config/install/user.role.keyword_contributor.yml
index 331febc..175e2d8 100644
--- a/config/install/user.role.keyword_contributor.yml
+++ b/config/install/user.role.keyword_contributor.yml
@@ -6,17 +6,11 @@ label: 'Keyword contributor'
 weight: 3
 is_admin: null
 permissions:
-  - 'access shortcuts'
   - 'access toolbar'
-  - 'add terms in category'
-  - 'add terms in keyword'
   - 'edit terms in category'
   - 'edit terms in keyword'
-  - 'publish any media'
-  - 'unpublish any media'
   - 'update any media'
   - 'update media'
-  - 'view any published media'
   - 'view media'
   - 'view shared media collection entities'
   - 'view shared media collection item entities'
diff --git a/config/install/user.role.manager.yml b/config/install/user.role.manager.yml
index e7e96fc..a9c37b6 100644
--- a/config/install/user.role.manager.yml
+++ b/config/install/user.role.manager.yml
@@ -10,15 +10,10 @@ permissions:
   - 'access media asset usage statistics'
   - 'access media_embed entity browser pages'
   - 'access media_library entity browser pages'
-  - 'access shortcuts'
   - 'access toolbar'
   - 'add media collection (shared) entities'
   - 'add media collection entities'
   - 'add media collection item entities'
-  - 'add terms in category'
-  - 'add terms in keyword'
-  - 'administer gdpr settings'
-  - 'administer task entities'
   - 'create guideline media'
   - 'create icon media'
   - 'create image media'
@@ -37,7 +32,6 @@ permissions:
   - 'delete any video_file media'
   - 'delete media'
   - 'delete media collection (shared) entities'
-  - 'delete media collection item entities'
   - 'delete own guideline media'
   - 'delete own icon media'
   - 'delete own image media'
@@ -67,36 +61,24 @@ permissions:
   - 'edit own template media'
   - 'edit own video media'
   - 'edit own video_file media'
-  - 'edit task entities'
   - 'edit terms in category'
   - 'edit terms in keyword'
   - 'merge taxonomy terms'
-  - 'publish any media'
-  - 'publish own media'
   - 'update any media'
   - 'update media'
   - 'upload media'
-  - 'view any published media'
   - 'view any unpublished guideline media'
   - 'view any unpublished icon media'
   - 'view any unpublished image media'
   - 'view any unpublished logo media'
-  - 'view any unpublished media'
   - 'view any unpublished template media'
   - 'view any unpublished video media'
   - 'view any unpublished video_file media'
-  - 'view gdpr data summary'
-  - 'view gdpr fields'
   - 'view media'
-  - 'view media bundle'
   - 'view own media collection entities'
   - 'view own media collection item entities'
-  - 'view own published media'
   - 'view own unpublished media'
-  - 'view published media collection entities'
-  - 'view published media collection item entities'
   - 'view shared media collection entities'
   - 'view shared media collection item entities'
-  - 'view task entities'
   - 'view terms in category'
   - 'view terms in keyword'
diff --git a/config/install/user.role.media_api.yml b/config/install/user.role.media_api.yml
index be40d75..d79cde5 100644
--- a/config/install/user.role.media_api.yml
+++ b/config/install/user.role.media_api.yml
@@ -7,13 +7,8 @@ weight: 4
 is_admin: null
 permissions:
   - 'access content'
-  - 'access tml jsonapi resources'
-  - 'add terms in category'
-  - 'add terms in keyword'
   - 'edit terms in category'
   - 'edit terms in keyword'
-  - 'restful get tml_media_library'
-  - 'view any published media'
   - 'view shared media collection entities'
   - 'view shared media collection item entities'
   - 'view terms in category'