Currently it just includes the system_update role, but it will be exanded in the future, when new relevant roles get added.