JDBC security and Operation Permissions on groups

I have users and roles being populated with information from an external source. Not Pentaho default security. It appears that the roles are being used but since there is no pentaho role with"operation permissions" the roles cannot "read content" as intended. How are operation permissions defined for non-pentaho roles.

thanks in advance