-- Apply once after migration 012. Existing memberships and permissions are unchanged.
INSERT INTO tenant_roles(role_key,display_name,built_in,active) VALUES
 ('province_secretary','Provincial Secretary',1,1)
ON DUPLICATE KEY UPDATE display_name=VALUES(display_name),active=1;
INSERT IGNORE INTO tenant_role_scopes(role_key,scope_type) VALUES ('province_secretary','province');
ALTER TABLE province_admin_invites ADD COLUMN role_key VARCHAR(40) NOT NULL DEFAULT 'province_admin' AFTER province_id;