add custom validation on roles