...
delete all existing permissions and roles
trigger (empty POST request) the following endpoint to create the permissions correctly (same process thats normally done during space creation) /{spaceId}/api/v1/permissions/create-missing
create fresh roles and give them to your users as in option 1
...