"RepoInit operations are always additive, except for a few cases which allow removal of Users, Service Users, and Groups.
Explicit permissions are not needed to run the RepoInit scripts. They have implicit permissions to perform all actions defined per the scripts."
https://www.bounteous.com/insig...