There is a bug somewhere with the way this role works with the [users role](https://git.coop/webarch/users) in terms of the Matomo extension, there is a work-around, create the site in Matomo prior to running the install and then specify the Matomo site ID the the user dictionary.