fixed role assignment