when using @pulumi/cloud cron() is there no way to pass a role or permissions to the function?