in src/main/java/org/apache/fineract/cn/dev/ServiceRunner.java [571:585]
private Role defineSchedulerRole() {
final Permission permissionRequestionCreationPermission = new Permission();
permissionRequestionCreationPermission.setAllowedOperations(Collections.singleton(AllowedOperation.CHANGE));
permissionRequestionCreationPermission.setPermittableEndpointGroupIdentifier(org.apache.fineract.cn.identity.api.v1.PermittableGroupIds.APPLICATION_SELF_MANAGEMENT);
final Permission beatPublishToPortfolioPermission = new Permission();
beatPublishToPortfolioPermission.setAllowedOperations(Collections.singleton(AllowedOperation.CHANGE));
beatPublishToPortfolioPermission.setPermittableEndpointGroupIdentifier(org.apache.fineract.cn.rhythm.spi.v1.PermittableGroupIds.forApplication(portfolioManager.name()));
final Role role = new Role();
role.setIdentifier("scheduler");
role.setPermissions(Arrays.asList(permissionRequestionCreationPermission, beatPublishToPortfolioPermission));
return role;
}