How can I apply changes to user permissions across several sites?
I found this snippet for copying permissions from one role to another, which you can easily rewrite to a drush sql command and integrate in your current workflow.