User and roles can be added to packages. The package designer has a button "Security Accounts" on the ribbon "Add", which allows you to add users / roles to the package.
As for access rights, they are stored in the elements on which they are set. Therefore, to deploy permissions, you must add items to the package.
Ruud van falier
source share