We can directly edit the app/authorization/server/startup.js but remember to clear the rocketchat_permissions collection to let it take effect.