Merge "Define two new permissions to guard role-based access to AppSearch."