(sf) New permissions and reports are deployed post-upgrade by Connected Deployment or by leveraging user credentials. (TBD)