How can I create a role with some permissions removed?

1. Create a list of all permissions:

   ciphermail-cli auth permissions effective --name cli | jq .[] -r > permissions.txt
   

2. Remove any unwanted permissions (for example permissions which contain permissions related to Globalsign)

   sed '/globalsign/d' permissions.txt > new-permissions.txt
   

3. Create a new role

   ciphermail-cli auth role create --name new-role
   

4. Assign new permissions to the new role

   cat new-permissions.txt | xargs ciphermail-cli auth role permissions add --name new-role --permissions