I think this case (i.e., when the user is trying to interact with themself) is better to be added to `resolveImplicitRole`. The user will have maximum access on themself (in this case, `manager`).