fix: roles in requestaccess #1083