issue #20540: segmented role privileges