Answer
Build the permission set from the specific actions the task needs, and add the predefined role only if it's genuinely a good match — starting from "the closest existing role" and trimming is usually harder to get right than starting from the actual requirement. See understand permission sets.