You can include schema-level privileges in the hdbrole which you deploy to the HDI container, e.g. EXECUTE on the container schema.
I'm wondering why the database user needs EXECUTE on the container schema if no TASK (..) is deployed into the container schema.