code: private static void addDefaultRoles(Catalog catalog)
      {
          // admin
          catalog.execute("add /clusters#cluster/databases#database groups administrator");
          Permission.setPermissionsInGroup(getCatalogDatabase(catalog).getGroups().get("administrator"),
                                           Permission.getPermissionsFromAliases(Arrays.asList("ADMIN")));
  
          // user
          catalog.execute("add /clusters#cluster/databases#database groups user");
          Permission.setPermissionsInGroup(getCatalogDatabase(catalog).getGroups().get("user"),
                                           Permission.getPermissionsFromAliases(Arrays.asList("SQL", "ALLPROC")));
      }
docs: Create default roles. These roles cannot be removed nor overridden in the DDL.
  Make sure to omit these roles in the generated DDL in {@link org.voltdb.utils.CatalogSchemaTools}
  Also, make sure to prevent them from being dropped by DROP ROLE in the DDLCompiler
  !!!
  IF YOU ADD A THIRD ROLE TO THE DEFAULTS, IT'S TIME TO BUST THEM OUT INTO A CENTRAL
  LOCALE AND DO ALL THIS MAGIC PROGRAMATICALLY --izzy 11/20/2014