provide tenant
exit when roles not found