OverrideServiceCompilerPass.php

<?php

namespace AppBundle\DependencyInjection\Compiler;

use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
use Symfony\Component\DependencyInjection\ContainerBuilder;

class OverrideServiceCompilerPass implements CompilerPassInterface
{
    public function process(ContainerBuilder $container): void
    {
        // @TODO: Add parameter check for an enabling flag
        if ($container->hasParameter('security.role_hierarchy.roles')) {
            $roles = $container->getParameter('security.role_hierarchy.roles');
            $roles['ROLE_TO_EXTEND'][] = 'ROLE_CAN_EDIT_SOME_RESOURCE';
            $roles['ROLE_TO_EXTEND'][] = 'ROLE_CAN_DELETE_SOME_RESOURCE';
            $container->setParameter('security.role_hierarchy.roles', $roles);
        }
    }
}