com.sap.hana.di.role Error 258 When deploying to HANA XSA

[sergey_korolev]

Trying to add to default_access_role some system privileges.

default_access_role.hdbrole:

{
"role":{
"name":"default_access_role",
"schema_roles": [{
   "names": ["hana_odata_ns.db_odata1::techuser"]
}]
}
}

techuser.hdbrole:

{
"role":{
"name": "hana_odata_ns.db_odata1::techuser",
"schema_privileges": [{
   "privileges": ["ALTER","CREATE ANY","INSERT","DELETE","UPDATE","EXECUTE", "SELECT METADATA", "SELECT CDS METADATA"]
}],
"system_privileges": ["CATALOG READ"]
}
}

Build always fails with error

Error: com.sap.hana.di.role : Database error 258 : insufficient privilege: not authorised

is it possible at all?

Any suggestions?