[api] fix xpath query searching for a user or group with specific role