I wrote this article explaining how to handle permissions, roles and users programmatically in Superset, I hope it helps