For some reason I always thought this was possible even though I'd never
used it...
I create a role and grant many operations over many objects to the role
Then I grant the role to users as required.

Now I need another role with all the other permissions as well as just a few
more.
I always thought I could grant the first role to the second role then add
the additional permissions.
But this is not possible eh?
I have to re-grant all the permissions to the new role as well as the few
additional ones then grant this role to the user. I then also have to
maintain the grants to both roles independently instead of being able to add
permission to the first role knowing it also grants them to the second one.

Is there no other way?

regards
Alan McDonald