什么是以编程方式向组添加权限的正确方法

I want to add (already existing, defined via permissions in the meta tag) permissions to groups and looking for the correct place to do so. I have to assure that after the sync_db command all groups have the correct permissions assigned to.I want to add (already existing, defined via pe