Whitelist permission before trying to grant it for role.

Or otherwise the permission cannot be granted if it's not whitelisted
beforehand by something else.

Fixes: 135136001
Test: presubmit
Change-Id: I11fa97c8c31c1dfbc498158852dff18cf8e23a8d